image uploads
| From: | Michael Hall | Date: | Tue, 10 Oct 2000 12:57:10 +0000 |
| Subject: | image uploads | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-19326@lists.php.net to get a copy of this message | ||
I'm building a PHP site that allows users to upload image files as part of a
'create your own homepage' feature.
I'm wondering if anyone has any ideas or advice about the security issues
involved. At the moment, the permissions in the uploads directory (where
images are copied to) are set to r,w,x as that is apparently the only way we
can get it to work consistently. My sysadmin has noted that some of the
image files being uploaded are 'executable', others not, which is where my
problem appears to lie. Sorry if this is a little vague, but this particular
area is new to me. Any light that can be shed on this matter much
appreciated.
Michael Hall