Merge branch 'File_security' into 'master'

Migration changes has been addressed

See merge request !412

modules/Migration/models/Module.php

@@ -39,6 +39,8 @@ class Migration_Module_Model extends Vtiger_Module_Model {
 			array('700' => '7.0.0'),
 			array('701' => '7.0.1'),
 			array('710' => '7.1.0'),
+            array('711' => '7.1.1'),
+            array('720' => '7.2.0'),
 		);
 		return $versions;
 	}

[Nilay Khatri]

why are we not also including the File Extension for encryption?

https://code.vtiger.com/vtiger/vtigercrm/blob/master/modules/Vtiger/helpers/Util.php#L1247

[Prasad]

@nilay.automatesmb - obscurity is obtained not just with filename and extension likely won't matter.

[Nilay Khatri]

Obscuring filename would prevent guessing the data in file or the relations.

But if extension name is visible one could also get hints on how to play around with that file.

[Prasad]

@nilay.automatesmb - extension play important role in mime-type management. If something can guess filename with extension then the point of obscurity is defeated isn't. I will wait for more stuble reason why extension should be removed and also what impact would it bring in.

[Nilay Khatri]

Okay, agreed for now.

also shouldn't the storedname be encrypted in database using a key based algorithm?