Re: Securing File Uploads Was: Is it possible to test an uploaded file to check the type?

On Saturday 19 July 2003 04:49, Gerard Samuel wrote: > Sorry for bring this back to life, but Im looking for some more opinions. > A friend and I are somewhat dead locked, as to whether with available > tools via php, that its possible to *reliably* secure file uploads. > File uploads currently encompass, images, mp3, real audio files, > with plans for ogg vorbis, flash, and what ever audio/visual/document > file formats, I can make php read its metadata. > These files will be used in a gallery type environment, to be displayed, > downloaded, or streamed. > The end product will be used by people who most likely will have their > sites hosted, thus no real control over the server, and can be run on > *nix/Windows environments. In a response to your previous posts on this matter, I suggested that you search freshmeat/sourceforge for a PHP-based media file metadata extractor (yes one does exist). I'm putting forward the same suggestion again. -- Jason Wong -> Gremlins Associates -> www.gremlins.biz Open Source Software Systems Integrators * Web Design & Hosting * Internet & Intranet Applications Development * ------------------------------------------ Search the list archives before you post http://marc.theaimsgroup.com/?l=php-general ------------------------------------------ /* The story you are about to hear is true. Only the names have been changed to protect the innocent. */