note 84649 added to function.getimagesize

When validating images, allways check both, image type *AND* file extension! Because most image types allow sections for comments or other irrelevant data. Those section can be used to infiltrate php code onto the server. If these files are stored as sent by the client, files with a ".php" extension can be executed and do tremendous harm. ---- Server IP: 212.124.37.9 Probable Submitter: 78.53.87.115 ---- Manual Page -- http://www.php.net/manual/en/function.getimagesize.php Edit -- https://master.php.net/note/edit/84649 Del: integrated -- https://master.php.net/note/delete/84649/integrated Del: useless -- https://master.php.net/note/delete/84649/useless Del: bad code -- https://master.php.net/note/delete/84649/bad+code Del: spam -- https://master.php.net/note/delete/84649/spam Del: non-english -- https://master.php.net/note/delete/84649/non-english Del: in docs -- https://master.php.net/note/delete/84649/in+docs Del: other reasons-- https://master.php.net/note/delete/84649 Reject -- https://master.php.net/note/reject/84649 Search -- https://master.php.net/manage/user-notes.php