note 51256 deleted from features.file-upload by danbrown
| From: | danbrown@php.net | Date: | Sun, 23 Jan 2011 17:04:55 +0000 |
| Subject: | note 51256 deleted from features.file-upload by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-176147@lists.php.net to get a copy of this message | ||
Note Submitter: james [at] adultphpsolutions [dot] com
----
Well let me ask you this? Why would you compromise security doing this? Might as well just turn
off IP tables, you're basically allowing any connections to any port on your server, bad move.
I don't have those and have no problem uploading files.
"The iptables rules for this are as follows:
# allow all fragments
-A INPUT -f -j ACCEPT
# allow icmp traffic
-A INPUT -p icmp -j ACCEPT" <-- From guy below me...
On the bright side, this will also fix some issues with ssh and NFS =)
On another note, a smart programmer would also do checking on the files that are uploaded, making
sure that they are the correct file, it is another breach in security not by checking the files you
are uploading are in a web viewable area. Just my two cents...