note 51256 deleted from features.file-upload by danbrown

From: Date: Sun, 23 Jan 2011 17:04:55 +0000
Subject: note 51256 deleted from features.file-upload by danbrown
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-176147@lists.php.net to get a copy of this message
Note Submitter: james [at] adultphpsolutions [dot] com ---- Well let me ask you this? Why would you compromise security doing this? Might as well just turn off IP tables, you're basically allowing any connections to any port on your server, bad move. I don't have those and have no problem uploading files. "The iptables rules for this are as follows: # allow all fragments -A INPUT -f -j ACCEPT # allow icmp traffic -A INPUT -p icmp -j ACCEPT" <-- From guy below me... On the bright side, this will also fix some issues with ssh and NFS =) On another note, a smart programmer would also do checking on the files that are uploaded, making sure that they are the correct file, it is another breach in security not by checking the files you are uploading are in a web viewable area. Just my two cents...

« previous php.notes (#176147) next »