note 59379 added to features.file-upload

i have been concerned by the security hole with file upload, but i guess there are two simple means to be sure no one can ever execute some code (.php extension): - once uploaded, move the file to a path directory that complicated, it 'd be impossible to find it by url. - put a ".htaccess file", with a "deny from all", so that in case the path is discovered, none of the file can be accessed from anybody, nor executed. i m not sure this advice is a good one since i 'm a new user of php, but it seems to me to resolve that matter. if i were to be mistaken , contact me please cheers jii ---- Manual Page -- http://www.php.net/manual/en/features.file-upload.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+59379 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+59379&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+59379&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+59379&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+59379&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+59379&report=yes&reason=non-english Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+59379&report=yes&reason=already+in+docs Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+59379&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+59379&report=yes Search -- http://master.php.net/manage/user-notes.php