Omnidon wrote: I still say that it should be possible for the admins to allow *any* filetype, at their discretion. Admins are already capable of causing many security issues in other aspects of the forum, so why should they be crippled by an artificial limitation in this area?
In phpBB 2, the admins could enable HTML tags by adding them to the list. Why not do the same for attachment extensions?
Your list would make for a good default set of extensions, but ultimately this is a decision that should be left up to the admin.
Yawnster wrote: SWF - Use the [flash] BBcode Instead.. Almost identical functionality..
To my understanding, the attachment feature uploads the file to the server, whereas the BBcode feature just hotlinks the file from another server.
This is far from identical functionality. Many users lack the ability to upload files conveniently.
It would be a considerable risk to allow it in a public forum, but I run multiple private forums and think that I should be able to make that decision for myself.