note 15811 deleted from features.file-upload by hholzgra
| From: | hholzgra@php.net | Date: | Sun, 14 Apr 2002 22:19:34 +0000 |
| Subject: | note 15811 deleted from features.file-upload by hholzgra | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-29340@lists.php.net to get a copy of this message | ||
Check out the article at http://www.securiteam.com/unixfocus/5JP0D152LU.html
for potential vulnerabilities with file uploads. The main conclusion of the article is to use
$HTTP_POST_FILES for information about the uploaded file(s) as it can't be overwritten by
user-submitted variables.