Re: Security Concerns with Uploaded Images:
| From: | Nick Wilson | Date: | Sun, 14 May 2006 07:26:16 +0000 |
| Subject: | Re: Security Concerns with Uploaded Images: | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-236140@lists.php.net to get a copy of this message | ||
* and then chris smith declared....
> Check the file extension and the mimetype, make sure they are both
> valid.. or as someone else suggested, use getimagesize on it - if that
> returns false or empty then it's not an image.
Ok thanks guys. I'll do extension and mime and getimagesize() before
saving/using them.
Much thanks!
--
Nick Wilson
Tel: +45 3311 2250