Re: Security Concerns with Uploaded Images:
| From: | Michelle Konzack | Date: | Mon, 22 May 2006 15:26:46 +0000 |
| Subject: | Re: Security Concerns with Uploaded Images: | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-236637@lists.php.net to get a copy of this message | ||
Am 2006-05-14 00:11:09, schrieb Nick Wilson:
> Hi all,
>
> are there any security concerns with uploaded images?
>
> My thought is that it wouldnt be too hard to have some kind of script
> masquerade as a gif file, and perhaps cause damage.
>
> I cant find anyway to check a file really is a gif/png/jpg (i assume the
> mimetype available in $_FILES could be spoofed).
Use the unix command "file" to determiner what file you have.
I have had the same problem...
> Many thanks!
Greetings
Michelle Konzack
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
50, rue de Soultz MSM LinuxMichi
0033/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)