Tag Info

New answers tagged

0

Unrestricted file uploads are only dangerous to the server if either 1) you can upload to an arbitrary location, or 2) convince the server software to process your file. The first lets you overwrite pieces of the server software with your own code, while the second lets you exploit vulnerabilities in the software (eg. buffer overflows). If the server ...


5

There are a few things you can do to mitigate the risk: Try to upload the files to a path outside your webroot For example, if you host your site on /var/www/myserver/html, make your PHP upload script write files on /var/www/myserver/data. This way, a Local File Include will not work, as the sent files are outside the server root. Don't use Mime Type or ...



Top 50 recent answers are included