How to securely upload files?
Answer
•Check MIME type (finfo).
•Do not trust the extension.
•Store outside webroot.
•Generate new names.
•Limit size.
Was this answer helpful?
More questions in this topic
- How to install PHP on Windows?
- How to install PHP on Mac?
- How to install PHP on Linux?
- What is php.ini?
- How to run a PHP script?
- What data types are in PHP?
- What is the difference between == and ===?
- What is the difference between require and include?
- What are variables in PHP?
- What are constants in PHP?
- How do if/else conditions work?
- What loops are available in PHP?
Related questions from other topics
- How to type localStorage and type conversions?Programming · TypeScript
- What is the difference between type assertion (as) and actual type checking?Programming · TypeScript
- Backup: how to store backups securely (encryption, offsite)?Security · Backup
- Viruses and malware: how to safely download software and check files?Security · Viruses and malware
- Browser extensions: how to check an extension for safety and reputation?Browsers · Browser extensions
- Browser security: how to securely store passwords and cookies in your browser?Browsers · Browser security