Notes attachment file name changes to id

[ddaavvee]

When upload attachment, the name of the actual file in cache dir changes to the Notes id. I would like to keep the file name and ext on the actual files, is this possible in 5.0.0g?

For example, under History subtab I click "Create Note or Attachment". I attache file "report.pdf" and click save, which created a Note record with id "7-ef534fh-gr-44tgf". At first the uploaded file in the cache directory is still called "report.pdf", however as soon as Sugar accesses the file it changes the name of the file from "report.pdf" to "7-ef534fh-gr-44tgf"; I cannot any longer effectively identify the uploaded file on the server nor even what type of file it is. I do not want this to happen.
Sugar can still access the file and open it fine as it does using notes.filename, but I want to still see the original filename of the file when I look at the cache directory on the server.

Thanks for any info, everyone!

Dave

[kuske]

You know that than an uploaded file
i_will_kill_your_server.php
can be simply executed by opening your webaddress
http://www.ddaavvee.com/sugarcrm/cache/upload/i_will_kill_your_server.php
by everyone without any login?

That would be a real great security issue!

Perhaps it would be better to write a little interface module - like sugar dicuments tab - getting the real names from the database and showing it only authentificated users.

[ddaavvee]

Very good info and idea. Thank you!