From fec8eaef707aa176d752b02d966cd6b542b5a327 Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Sat, 7 Jun 2025 01:28:13 -0400
Subject: [PATCH] Remove xml from the allowed upload list, if you must zip it
 up

---
 modals/client_file_upload_modal.php | 2 +-
 post/user/file.php                  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/modals/client_file_upload_modal.php b/modals/client_file_upload_modal.php
index 02f1fd42..65aaaa44 100644
--- a/modals/client_file_upload_modal.php
+++ b/modals/client_file_upload_modal.php
@@ -44,7 +44,7 @@
                     </div>
 
                     <div class="form-group">
-                        <input type="file" class="form-control-file" name="file[]" multiple id="fileInput" accept=".jpg, .jpeg, .gif, .png, .webp, .pdf, .txt, .md, .doc, .docx, .odt, .csv, .xls, .xlsx, .ods, .pptx, .odp, .zip, .tar, .gz, .xml, .msg, .json, .wav, .mp3, .ogg, .mov, .mp4, .av1, .ovpn, .cfg, .ps1, .vsdx, .drawio, .pfx, .unf, .key, .stk, .bat">
+                        <input type="file" class="form-control-file" name="file[]" multiple id="fileInput" accept=".jpg, .jpeg, .gif, .png, .webp, .pdf, .txt, .md, .doc, .docx, .odt, .csv, .xls, .xlsx, .ods, .pptx, .odp, .zip, .tar, .gz, .msg, .json, .wav, .mp3, .ogg, .mov, .mp4, .av1, .ovpn, .cfg, .ps1, .vsdx, .drawio, .pfx, .unf, .key, .stk, .bat">
                     </div>
                     <small class="text-secondary">Up to 20 files can be uploaded at once by holding down CTRL and selecting files</small>
 
diff --git a/post/user/file.php b/post/user/file.php
index 9debb0fe..24b29ce5 100644
--- a/post/user/file.php
+++ b/post/user/file.php
@@ -28,7 +28,7 @@ if (isset($_POST['upload_files'])) {
     $allowedExtensions = [
         'jpg', 'jpeg', 'gif', 'png', 'webp', 'pdf', 'txt', 'md', 'doc', 'docx',
         'odt', 'csv', 'xls', 'xlsx', 'ods', 'pptx', 'odp', 'zip', 'tar', 'gz',
-        'xml', 'msg', 'json', 'wav', 'mp3', 'ogg', 'mov', 'mp4', 'av1', 'ovpn',
+        'msg', 'json', 'wav', 'mp3', 'ogg', 'mov', 'mp4', 'av1', 'ovpn',
         'cfg', 'ps1', 'vsdx', 'drawio', 'pfx', 'pages', 'numbers', 'unf', 'key',
         'bat', 'stk'
     ];