Re: Uploading JPEG's - Security Issues?
| From: | Tom Rogers | Date: | Thu, 16 May 2002 04:46:38 +0000 |
| Subject: | Re: Uploading JPEG's - Security Issues? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-97870@lists.php.net to get a copy of this message | ||
Hi
What I do is use the function GetImageSize(), if that returns x and/or y = 0 it probably isn't an image file and dump it.
Tom
At 05:06 AM 16/05/2002, you wrote:
On Wed, 15 May 2002, Andre Dubuc wrote: Actually, I figured out how to do it: a combination of checking: if ( $_REQUEST['pix']['type'] == "image/jpeg")} blah, blah, blah I'm pretty certain that the 'type' that appears here is just derived from the file name, and therefore is not trustworthy. Someone please correct me if I'm wrong (as if that's ever a problem...) miguel -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php