Re: security of uploaded gif files

From: Date: Sun, 22 Jan 2006 16:17:25 +0000
Subject: Re: security of uploaded gif files
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-229029@lists.php.net to get a copy of this message
Perhaps this would be a problem if you wrote a PHP program to reverse stenography on images it receives and execute them. ;-) On Sun, Jan 22, 2006 at 10:58:37AM GMT, Rory Browne [rory.browne@gmail.com] said the following: > I'd be a bit skeptical about the possibly of embedding PHP code inside > a GIF file. Could you outline how he performed the task? > > On 1/22/06, jonathan <news_php@arclocal.com> wrote: > > what is the best way to prevent malicious code from being uploaded > > via a .gif file? A friend showed me how php could be embedded within > > the .gif file. Does this problem also exist for .jpeg's? > > > > thanks, > > > > jon > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, visit: http://www.php.net/unsub.php > > > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > -- Mark S. Krenz mark@slugbug.org

« previous php.general (#229029) next »