php file upload script help

Reply

Join Date: Sep 2008
Posts: 140
Reputation: rajeesh_rsn is an unknown quantity at this point 
Solved Threads: 0
rajeesh_rsn rajeesh_rsn is offline Offline
Junior Poster

php file upload script help

 
0
  #1
Jan 15th, 2009
Hi I make a php file upload script and uploaded in my ftp server. And works fine when I changed the permission of the folder into full ( ie world can write, execute and read ) . The images are saved in that folder......
How much it is secured ?? Is any one can view this folder or any Hack ???

Please Help me ...
Reply With Quote Quick reply to this message  
Join Date: Aug 2008
Posts: 84
Reputation: MVied is an unknown quantity at this point 
Solved Threads: 5
MVied's Avatar
MVied MVied is offline Offline
Junior Poster in Training

Re: php file upload script help

 
0
  #2
Jan 15th, 2009
You should be fine as long as you only allow certain file types to be uploaded. For instance, you don't want people to be able to upload files that may contain malicious code to your website. You will want to check the file type of what is being uploaded to ensure that it is an image. If you've already done that, you shouldn't have any problems.
"We've heard that a million monkeys at a million keyboards could produce the complete works of Shakespeare; now, thanks to the Internet, we know that is not true." - Robert Wilensky
Reply With Quote Quick reply to this message  
Join Date: May 2007
Posts: 81
Reputation: it2051229 is an unknown quantity at this point 
Solved Threads: 1
it2051229 it2051229 is offline Offline
Junior Poster in Training

Re: php file upload script help

 
0
  #3
Jan 15th, 2009
let's say you have uploaded "abc.JPEG" on that directory... if someone knows the directory name and the "abc.JPEG", they could just directly type that on the URL and they get to access "abc.JPEG".
Reply With Quote Quick reply to this message  
Join Date: Aug 2008
Posts: 84
Reputation: MVied is an unknown quantity at this point 
Solved Threads: 5
MVied's Avatar
MVied MVied is offline Offline
Junior Poster in Training

Re: php file upload script help

 
0
  #4
Jan 16th, 2009
Well if that were the case, you could write a .htaccess file that only allows requests from localhost to access the files in the directory.
"We've heard that a million monkeys at a million keyboards could produce the complete works of Shakespeare; now, thanks to the Internet, we know that is not true." - Robert Wilensky
Reply With Quote Quick reply to this message  
Reply

This thread is more than three months old.
Perhaps start a new thread instead?
Message:


Thread Tools Search this Thread



Tag cloud for PHP
About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC