Re: Re[4]: [PHP] Re: jpeg Uploader issue
| From: | Toby Irmer | Date: | Thu, 15 Jan 2004 16:18:38 +0000 |
| Subject: | Re: Re[4]: [PHP] Re: jpeg Uploader issue | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-174674@lists.php.net to get a copy of this message | ||
that was explaining the prinicple.
of course you wouldn't do it like this, but pass an id to identify. you
could also send an encryption key...
----- Original Message -----
From: "CPT John W. Holmes" <holmes072000@charter.net>
To: "Toby Irmer" <php@irmer.com>; "Mike R"
<spycobalt@spyproductions.com>
Cc: <php-general@lists.php.net>
Sent: Thursday, January 15, 2004 5:15 PM
Subject: Re: Re[4]: [PHP] Re: jpeg Uploader issue
> From: "Toby Irmer" <php@irmer.com>
>
> > file: show.php
> >
> > <?
> > header("Content-type: image/jpeg");
> > readfile("/path/to/file/".$_GET["filename"]);
> > ?>
> >
> >
> > in your files:
> >
> > <img src="show.php?filename=myfile.jpg" ...>
> >
> > or something like that ;)
>
> Are you trying to get him to compromise his server? I'm sure that's just a
> simple suggestion, but it's horrible. This will allow a user to request
the
> contents of any file PHP has access to read...
>
> ---John Holmes...
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>