Reputation
670
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
6 11
Newest
 Commentator
Impact
~15k people reached

Aug
11
awarded  Commentator
Aug
11
comment Risks of a php image upload form
@1lastBr3ath it depends on how you have it configured. If the webserver executes the file (I.E. If the file is treated as executable code because the extension is something like .php) then you are still not safe.
Mar
12
awarded  Guru
Mar
12
awarded  Yearling
Sep
30
awarded  Explainer
Jun
7
comment I'm an IT consultant. Should I discourage a client from telling me his password?
Yes, and "this person is prepared to move this friendship forward" also doesn't apply. This is a client relationship, not a friendship.
Apr
17
awarded  Good Answer
Mar
21
awarded  Yearling
Mar
20
comment Risks of a php image upload form
@MikeWeller When you did so, do you remember what the filename was? I'd be willing to bet it was something.php.jpg or even worse, something.php. A properly configured Apache server will not execute PHP code inside a file which does not have .php in the name.
Mar
19
awarded  Mortarboard
Mar
19
comment Risks of a php image upload form
@lynks you probably can to some degree. But my point was it detects and returns the file and mime type of the image, and from that your code can save the file as .jpg, .png, .gif or reject it. On a properly configured Apache server, none of those file types will be executed as PHP / CGI scripts. Compare that to using the mime type from $_FILE which might be a lie, or trusting the filename sent from the client.
Mar
19
awarded  Enlightened
Mar
19
awarded  Yearling
Mar
19
awarded  Nice Answer
Mar
19
answered Risks of a php image upload form
Mar
6
revised Is it possible to locate Tor/proxy users? Spam is getting on my nerves
added 1 characters in body
Mar
6
comment Is it possible to locate Tor/proxy users? Spam is getting on my nerves
Great idea @sixtyfootersdude
Mar
6
awarded  Editor
Mar
6
revised Is it possible to locate Tor/proxy users? Spam is getting on my nerves
It's not a VPN, it's a Tor user
Mar
6
awarded  Teacher