Sunday, August 30, 2009

Re: File Uploads: What security-issues I have to take care of?

A few here:

- Check the extension as well as the mimetype
- Only allow certain types
- Check the filesize if needed
- Make sure the file is a valid file resource
- Make sure there are no errors upon uploading

I however have create a file upload plugin. You can use the plugin
itself or you can take a look at how its written and get an idea.

http://www.milesj.me/resources/script/uploader-plugin
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to cake-php+unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

No comments: