Skip to main content

Preparing the Joomla Media Manager

Before using the 3D Viewer Field, it's important to start by preparing the Joomla Media Manager. This step is crucial because the 3D Viewer Field plugin relies on Joomla's media field for various functionalities such as selecting and uploading 3D models, proposing attached downloadable files, and utilizing environment files for rendering models. To ensure the Joomla Media Manager is properly configured to handle 3D models and associated files, please follow these steps:

Access Media Manager Options​

  • Navigate to System -> Global Configuration.
  • Click on the Media tab to open the Media Manager Options.

Increase Maximum Upload Size​

The default maximum upload size is 10MB, which might not be sufficient for 3D models and associated files, in the Maximum Size (in MB) field, increase the value to accommodate your largest files. A good starting point might be 50MB, but adjust as needed based on your use case.

Add Allowed File Extensions​

In the Allowed Extensions field, add the following extensions to allow uploads of various 3D model formats and associated files: glb,gltf,bin,zip,hdr.

  • glb, gltf: For 3D models.
  • bin: May be needed for animations.
  • zip: For downloadable files, including models with animations, textures, or other assets.
  • hdr: For environment images.

In the Legal Image Extensions (File Types) field, add: hdr

In the Legal Document Extensions (File Types) field, add: glb,gltf,zip,bin

Add Required MIME Types​

In the Legal MIME Types field, add: application/octet-stream. This MIME type is necessary to upload the file extensions mentioned above.

warning

Security Considerations​

The bin file extension and the application/octet-stream MIME type can pose security risks for several reasons:

bin File Extension​

Executable Nature​

bin files can contain binary data, which might include executable code. This means they can potentially be run as programs on a user's computer. If a malicious actor uploads a bin file with harmful executable code, it could lead to various security issues, including unauthorized access, data breaches, or system damage.

Lack of Transparency​

Binary files are not human-readable, making it difficult to inspect their content. This lack of transparency can hide malicious code, making it harder to detect before execution.

Compatibility and Execution Risks​

Different systems handle binary files in various ways. A bin file that is safe on one system might be harmful on another, leading to unpredictable security vulnerabilities.

application/octet-stream MIME Type​

Generic Nature​

application/octet-stream is a general-purpose MIME type, often used when the server doesn't know the exact type of file being sent. This catch-all nature means it can be used to transfer any binary data. Because it’s so generic, it can be used to disguise harmful files as benign. For example, a malicious executable or script can be uploaded under this MIME type.

tip

Mitigation Strategies​

Validation and Sanitization​

Ensure that uploaded files are thoroughly checked before being accepted by the system.

Strict Access Controls​

Limit who can upload such files and monitor their activity closely. Only trusted users should have permissions to upload potentially risky file types.

Regular Audits​

Conduct regular security audits of the files stored on your server to identify and remove any suspicious or harmful files.

User Education​

Educate users about the potential risks of uploading and downloading files with these types and encourage safe practices.

By understanding the potential dangers and implementing robust security measures, you can mitigate the risks associated with allowing bin file extensions and application/octet-stream MIME types in your Joomla Media Manager.

By following these steps, your Joomla Media Manager will be properly configured to handle the various file types required for the 3D Viewer Field plugin, ensuring a smooth and efficient user experience.

info

If some files still cannot be uploaded due to Joomla's verification processes, you can temporarily disable the Restrict Uploads field in the Media Manager Options. This should help resolve the issue.

Please Remember to re-enable the option after uploading your files for increased security.