note 51256 added to features.file-upload

From: Date: Thu, 24 Mar 2005 20:21:40 +0000
Subject: note 51256 added to features.file-upload
Groups: php.notes 
Request: Send a blank email to php-notes+get-86899@lists.php.net to get a copy of this message
Well let me ask you this? Why would you compromise security doing this? Might as well just turn off IP tables, you're basically allowing any connections to any port on your server, bad move. I don't have those and have no problem uploading files. "The iptables rules for this are as follows: # allow all fragments -A INPUT -f -j ACCEPT # allow icmp traffic -A INPUT -p icmp -j ACCEPT" <-- From guy below me... On the bright side, this will also fix some issues with ssh and NFS =) On another note, a smart programmer would also do checking on the files that are uploaded, making sure that they are the correct file, it is another breach in security not by checking the files you are uploading are in a web viewable area. Just my two cents... ---- Manual Page -- http://www.php.net/manual/en/features.file-upload.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+51256 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+51256&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+51256&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+51256&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+51256&report=yes&reason=useless Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+51256&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+51256&report=yes Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#86899) next »