|
Posted by J.O. Aho on 10/12/24 11:37
Gernot Frisch wrote:
>> To further prevent people from uploading renamed extension files,
>> also
>> check the mime_type of the file being uploaded to ensure it truly is
>> an
>> exe or zip.
>
> If someone uploads a php file with .txt enxtension and calls it ->
> will it be interpreted by php?
No, it won't be as long as you don't include it in a script with include(),
include_once() and similar functions.
//Aho
Navigation:
[Reply to this message]
|