Security Concerns with Uploaded Images:

From: Date: Sat, 13 May 2006 22:11:09 +0000
Subject: Security Concerns with Uploaded Images:
Groups: php.general 
Request: Send a blank email to php-general+get-236124@lists.php.net to get a copy of this message
Hi all, are there any security concerns with uploaded images? My thought is that it wouldnt be too hard to have some kind of script masquerade as a gif file, and perhaps cause damage. I cant find anyway to check a file really is a gif/png/jpg (i assume the mimetype available in $_FILES could be spoofed). I'd welcome any thoughts in general on this, but specifically if anyone has experience/knowledge in this area and can point me in the right direction. Many thanks! -- Nick Wilson Tel: +45 3311 2250

« previous php.general (#236124) next »