Re: Uploading JPEG's - Security Issues?
| From: | Miguel Cruz | Date: | Wed, 15 May 2002 19:06:14 +0000 |
| Subject: | Re: Uploading JPEG's - Security Issues? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-97781@lists.php.net to get a copy of this message | ||
On Wed, 15 May 2002, Andre Dubuc wrote:
> Actually, I figured out how to do it: a combination of checking:
> if ( $_REQUEST['pix']['type'] == "image/jpeg")} blah, blah, blah
I'm pretty certain that the 'type' that appears here is just derived from
the file name, and therefore is not trustworthy. Someone please correct me
if I'm wrong (as if that's ever a problem...)
miguel