The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Hot answers tagged

1

You handle the upload with POST requests to a PHP script which checks the file extension and renames the file You should check the mime type. PHP have mime_content_type function for that. Even if it's possible to fool the mime header and have some code on the metadata of the file, this raises the bar for exploiting your system. If I understand correctly, ...


Only top voted, non community-wiki answers of a minimum length are eligible