New answers tagged file-upload
What's wrong with SFTP? You can mount it as a drive if WinSCP isn't enough and they really must have it look like a Windows folder.
There used to be a "vulnerability" where the image could send a HTTP 401 Unauthenticated response, which would trigger a login screen for the user. If you set this as forum avatar, it would spawn a login popup for anyone visiting a page where your avatar appears. Lots of people will then attempt to log in with some username and password combination, probably ...
Yes, you are safe. Of course, the page you get served when you Right click > View Image could be malicious, but no script will be executed in the context of your website. Moreover, don't forget that the owner of the website of the image can track your visitors on all pages where the image is embedded.
Top 50 recent answers are included