upload files and file types
| From: | Dan Rossi | Date: | Sat, 22 Mar 2003 12:26:22 +0000 |
| Subject: | upload files and file types | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-140678@lists.php.net to get a copy of this message | ||
hi there , i was wondering on security of file uploads , i am currently
using the pear uploader class , i can check for allowed file extensions ,
but it doesnt seem to check for file type , i can currently rename say an
image to zip and it uploads , is there anyway a hacker could rename an
executable to a zip and able to upload it and execute it ?