Although this is a very good idea it would only benefit people who had access to their own installation of PHP. Most people are only able to use PHP on a shared server so perhaps wouldn't have access to the php.ini file.
> >> > Yeah, definatley reason to explore the possibilities... But this is >> really my own stupid fault it got there in the first place... I had >> an image upload form and I didn't tell it only to accept image/jpeg >> or image/gif >> > > i see this happen quite a lot, both in these lists, and the security > focus ones. is there not something that can be set from a default > install on the php.ini ? make it that by default php only accepts images > / zip files / documents ? it seems to give PHP a reputation for being > very easy to compromise. > > sorry, this probably should be a new post, but this is kinda following > on, so please forgive me :) > > -skate- > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php Randum Ian [EMAIL PROTECTED] CBDagency Web Consultant http://www.cbdagency.com DancePortalGlobal Webmaster http://www.danceportalglobal.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php