Timeline for Upload file program
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 2, 2017 at 14:33 | vote | accept | cindea sorin | ||
| Jul 24, 2015 at 21:04 | comment | added | cindea sorin | Yes, i make this change, and i change more in script. | |
| Jul 22, 2015 at 15:40 | comment | added | Liam Sorsby | @cindeasorin It maybe an idea to change your type checker to contain allowed types rather than disallowed types. In this currency file I could upload an .exe file, .bat, .sh ect.... which you certainly do not want on your server. | |
| Jul 16, 2015 at 15:03 | history | edited | Jamal | CC BY-SA 3.0 |
deleted 200 characters in body; edited title
|
| Jul 16, 2015 at 14:25 | answer | added | maz258 | timeline score: 2 | |
| Jul 16, 2015 at 11:08 | comment | added | somethinghere | Ah sorry, skim reading caught me on that one. | |
| Jul 16, 2015 at 11:07 | comment | added | cindea sorin | No, i don't allow upload php. "public $type = array("php", "css", "js", "html", "htm", ".php");" | |
| Jul 16, 2015 at 11:05 | comment | added | somethinghere |
Just want to mention... Are you allowing uploads of .php files? Because that seems very dangerous. You might want to include some kind of MIUME checker. There are a couple ones out there using CURL to get the actual MIME type, but uploads are always dangerous.
|
|
| Jul 16, 2015 at 10:56 | history | asked | cindea sorin | CC BY-SA 3.0 |