# When uploading a secure media file without extension name - they are inaccessible

**URL:** <https://meta.discourse.org/t/when-uploading-a-secure-media-file-without-extension-name-they-are-inaccessible/171439>\
**Category:** Bug\
**Created:** [November 26, 2020, 7:56pm UTC](https://meta.discourse.org/t/when-uploading-a-secure-media-file-without-extension-name-they-are-inaccessible/171439 "2020-11-26T19:56:04Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Alon1](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/alon1/32/197167_2.png) [@Alon1](https://meta.discourse.org/u/Alon1)\
**Post date:** [November 26, 2020, 7:56pm UTC](https://meta.discourse.org/t/when-uploading-a-secure-media-file-without-extension-name-they-are-inaccessible/171439/1 "2020-11-26T19:56:05Z")

</div>

Steps to reproduce:

1. enable Secure Media
2. create a topic, upload some .pdf file (for example…) but first rename it and remove the “.pdf” from the file name
3. try to download the file from the topic and get " Oops! That page doesn’t exist or is private."

---

<div class="post-metadata">

**Author:** ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)\
**Post date:** [November 26, 2020, 10:35pm UTC](https://meta.discourse.org/t/when-uploading-a-secure-media-file-without-extension-name-they-are-inaccessible/171439/2 "2020-11-26T22:35:49Z")

</div>

I think this is in the “then don’t do that” category. Most sites restrict uploads to particular file extensions. Most humans don’t create files with no extension.

---

<div class="post-metadata">

**Author:** ![Alon1](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/alon1/32/197167_2.png) [@Alon1](https://meta.discourse.org/u/Alon1)\
**Post date:** [November 27, 2020, 9:00pm UTC](https://meta.discourse.org/t/when-uploading-a-secure-media-file-without-extension-name-they-are-inaccessible/171439/3 "2020-11-27T21:00:30Z")

</div>

I have some lab acquisition equipment that outputs files without extension. Can’t control how their hardware/software works…  
It might be the status quo to always include an extension but the fact is that all common OSs support filenames without extension so I think it make sense that Discourse would support it as well. I know this bug won’t affect 99.999% of users so no hard feelings if it doesn’t get fixed 😉

---

<div class="post-metadata">

**Author:** ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)\
**Post date:** [December 8, 2020, 9:22pm UTC](https://meta.discourse.org/t/when-uploading-a-secure-media-file-without-extension-name-they-are-inaccessible/171439/4 "2020-12-08T21:22:36Z")

</div>

Thanks for the report and feedback. I think for now Discourse will consider this a limitation of the design of secure media. Extensions are required.

---

<div class="post-metadata">

**Author:** ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)\
**Post date:** [December 8, 2020, 9:22pm UTC](https://meta.discourse.org/t/when-uploading-a-secure-media-file-without-extension-name-they-are-inaccessible/171439/5 "2020-12-08T21:22:38Z")

</div>