note 15811 added to features.file-upload
| From: | moody at infoscience dot it | Date: | Wed, 03 Oct 2001 20:52:37 +0000 |
| Subject: | note 15811 added to features.file-upload | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-18535@lists.php.net to get a copy of this message | ||
Check out the article at http://www.securiteam.com/unixfocus/5JP0D152LU.html
for potential vulnerabilities with file uploads. The main conclusion of the article is to use
$HTTP_POST_FILES for information about the uploaded file(s) as it can't be overwritten by
user-submitted variables.
--
http://www.php.net/manual/en/features.file-upload.php
http://master.php.net/manage/user-notes.php?action=edit+15811
http://master.php.net/manage/user-notes.php?action=delete+15811
http://master.php.net/manage/user-notes.php?action=reject+15811