note 51256 added to features.file-upload
| From: | james | Date: | Thu, 24 Mar 2005 20:21:40 +0000 |
| Subject: | note 51256 added to features.file-upload | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-86899@lists.php.net to get a copy of this message | ||
Well let me ask you this? Why would you compromise security doing this? Might as well just turn
off IP tables, you're basically allowing any connections to any port on your server, bad move.
I don't have those and have no problem uploading files.
"The iptables rules for this are as follows:
# allow all fragments
-A INPUT -f -j ACCEPT
# allow icmp traffic
-A INPUT -p icmp -j ACCEPT" <-- From guy below me...
On the bright side, this will also fix some issues with ssh and NFS =)
On another note, a smart programmer would also do checking on the files that are uploaded, making
sure that they are the correct file, it is another breach in security not by checking the files you
are uploading are in a web viewable area. Just my two cents...
----
Manual Page -- http://www.php.net/manual/en/features.file-upload.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+51256
Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+51256&report=yes&reason=added+to+the+manual
Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+51256&report=yes&reason=bad+code
Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+51256&report=yes&reason=spam
Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+51256&report=yes&reason=useless
Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+51256&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+51256&report=yes
Search -- http://master.php.net/manage/user-notes.php