FUDforum: comp.lang.php » Security risks allowing users to upload a css file?

Home » Imported messages » comp.lang.php » Security risks allowing users to upload a css file?

Show: Today's Messages :: Polls :: Message Navigator

Re: Security risks allowing users to upload a css file? [message #181399 is a reply to message #181389]

Wed, 15 May 2013 10:26

The Natural Philosoph
Messages: 993
Registered: September 2010

Karma:

Senior Member

On 15/05/13 04:07, Bhushan N.N wrote:
> Are there any security risks involved in allowing a user to upload a css file?
>
> I will be using the uploaded css file for a preview. Using another HTML template I already have on the server.
Honey, there is a risk allowing user to upload ANYTHING to a server.

Up to and including aTCP packet requesting a page...

Your job is to balance that risk with the reward you get from them for
allowing them to do it.

--
Ineptocracy

(in-ep-toc’-ra-cy) – a system of government where the least capable to lead are elected by the least capable of producing, and where the members of society least likely to sustain themselves or succeed, are rewarded with goods and services paid for by the confiscated wealth of a diminishing number of producers.

Report message to a moderator

[Message index]

		Security risks allowing users to upload a css file? By: Bhushan N.N on Wed, 15 May 2013 03:07
		Re: Security risks allowing users to upload a css file? By: Arno Welzel on Wed, 15 May 2013 10:12
		Re: Security risks allowing users to upload a css file? By: The Natural Philosoph on Wed, 15 May 2013 10:26
		Re: Security risks allowing users to upload a css file? By: Jerry Stuckle on Wed, 15 May 2013 10:35
		Re: Security risks allowing users to upload a css file? By: Denis McMahon on Wed, 15 May 2013 12:44
		Re: Security risks allowing users to upload a css file? By: Bhushan N.N on Wed, 15 May 2013 15:14

Previous Topic:	changing video source from youtube to my site
Next Topic:	Booleans compared to strings

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sat Nov 30 23:20:57 GMT 2024

Total time taken to generate the page: 0.03283 seconds