note 30658 added to features.file-upload

SECURITY CONSIDERATION: If you are saving all uploaded files to a directory accesible with an URL, remember to filter files not only by mime-type (e.g. image/gif), but also by extension. The mime-type is reported by the client, if you trust him, he can upload a php file as an image and then request it, executing malicious code. I hope I am not giving hackers a good idea anymore than I am giving it to good-intended developers. Cheers. -- http://www.php.net/manual/en/features.file-upload.php http://master.php.net/manage/user-notes.php?action=edit+30658 http://master.php.net/manage/user-notes.php?action=delete+30658 http://master.php.net/manage/user-notes.php?action=reject+30658