Re: Security for uploaded PDF files
| From: | Richard Lynch | Date: | Tue, 05 Jun 2007 22:29:28 +0000 |
| Subject: | Re: Security for uploaded PDF files | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-256137@lists.php.net to get a copy of this message | ||
On Mon, June 4, 2007 7:37 am, Al wrote:
> I have an application, with mild security, that approved users can
> upload pdf
> files. Obviously, the security for executables with a simple pdf
> extension
> bothers me.
>
> I's like some suggestions on how I can protect against errant files
> with a pdf
> guise?
PDF files have to start with %PDF and the version number, for starters.
You could also try to run them through xpdf and see if it bitches or
not -- I think it even has a command line switch to do just that.
--
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/browse/from/lynch
Yeah, I get a buck. So?