note 116976 added to function.getimagesize

Note: getimage size doesn't attempt to validate image file formats It is possible for malformed GIF images to contain PHP and still have valid dimensions. Programmers need to ensure such images are validated by other tools, or never treated as PHP or other executable types (enforcing appropriate extensions, avoiding user controlled renaming, restricting uploaded images to areas of the website where PHP is not enabled). http://ha.ckers.org/blog/20070604/passing-malicious-php-through-getimagesize/ ---- Server IP: 72.52.91.14 Probable Submitter: 54.246.169.207 ---- Manual Page -- http://php.net/manual/en/function.getimagesize.php Edit -- https://master.php.net/note/edit/116976 Del: integrated -- https://master.php.net/note/delete/116976/integrated Del: useless -- https://master.php.net/note/delete/116976/useless Del: bad code -- https://master.php.net/note/delete/116976/bad+code Del: spam -- https://master.php.net/note/delete/116976/spam Del: non-english -- https://master.php.net/note/delete/116976/non-english Del: in docs -- https://master.php.net/note/delete/116976/in+docs Del: other reasons-- https://master.php.net/note/delete/116976 Reject -- https://master.php.net/note/reject/116976 Search -- https://master.php.net/manage/user-notes.php