note 59379 rejected from features.file-upload by nlopess

Note Submitter: jii_ at hotmail dot com ---- i have been concerned by the security hole with file upload, but i guess there are two simple means to be sure no one can ever execute some code (.php extension): - once uploaded, move the file to a path directory that complicated, it 'd be impossible to find it by url. - put a ".htaccess file", with a "deny from all", so that in case the path is discovered, none of the file can be accessed from anybody, nor executed. i m not sure this advice is a good one since i 'm a new user of php, but it seems to me to resolve that matter. if i were to be mistaken , contact me please cheers jii