[PHP] Re: File Upload Security

2008-04-14 Thread Peter Ford
Al wrote: Thanks guys. I had written a newer version restricted to images which checks MIME and image width and height. I have one application which needs a text file. I think I'll have my users hide a password in it and scan the whole file for ? an ?php and other signs of scripts, etc.

[PHP] Re: File Upload Security

2008-04-14 Thread Al
I don't pay any attention to MIME sent by the client. I check the MIME returned from getimagesize() and I'm not too certain of it. i need to do further research. I do check the images have width and height and I extract the embedded text stuff. I'm going to look into your suggestion.

[PHP] Re: File Upload Security

2008-04-12 Thread Al
Thanks guys. I had written a newer version restricted to images which checks MIME and image width and height. I have one application which needs a text file. I think I'll have my users hide a password in it and scan the whole file for ? an ?php and other signs of scripts, etc. Al wrote:

[PHP] Re: File Upload Security and chmod

2006-09-22 Thread Jo�o C�ndido de Souza Neto
I always use the ftp functions of php to upload files. I think it´s more safe than move_uploaded_file function. Andy Hultgren [EMAIL PROTECTED] escreveu na mensagem news:[EMAIL PROTECTED] Hi, I am relatively new to php and am trying to set up a file upload process for my website. I have

[PHP] RE: File upload security and virus considerations

2002-09-06 Thread YC Nyon
I am doing an application where users can upload a *.zip file into the server. Virus and hackers threats are my main concern. Anyone mind sharing their experiences on how to deal with it. If u suggest any antivirus, please specifiy the name. the server is on windows platform. Also, if it's virus,