If you decide you need to scan uploaded files, you may wish to evaluate Metascan from OPSWAT (www.opswat.com). It is an API that enables integration with most AV packages in the market; supported development interfaces include C++, COM, JAVA; sample code in C# and ASP. Evaluation package is provided on request.
An interesting test would be to upload a file (exe, rar, doc) renamed as a PDF or JPG to a site powered by Metascan, www.filterbit.com. Filterbit demos scanning by 6 AVs in parallel, plus file verification (i.e. it should catch that the file type has been altered). Regards, Tom >OK, so I was reading a response to another question, where someone mentioned >the importance of scanning uploaded files...I hadn't thought of that. > >Two questions: >1. If all I allow for uploads is pdf and jpg, is that still neccessary? > >2. My site is on a vps so it would be all self serve...what can I use and >how do I get it to scan the uploaded file? > >TIA, > >Mark ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;192386516;25150098;k Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:302477 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
