FUDforum: Bug Reports » avatar upload

Home » FUDforum Development » Bug Reports » avatar upload

Show: Today's Messages :: Polls :: Message Navigator

Re: avatar upload [message #26908 is a reply to message #26868]

Sat, 20 August 2005 08:55

Riklaunim

Messages: 3
Registered: August 2005

Karma:

Junior Member

If you open an image in a notepad you will see a lot of weird things - binary file. If you add such thing before <?PHP functions like getimagesize will think that foo.php is a binary image file Smile

It has been described on many PHP security sites.

Check this file. You will be able to upload it as an avatar here - but it is a .php file Smile

Attachment: upload.php
(Size: 1.31KB, Downloaded 962 times)

Report message to a moderator

[Message index]

		avatar upload By: Riklaunim on Thu, 18 August 2005 12:06
		Re: avatar upload By: Ilia on Thu, 18 August 2005 13:02
		Re: avatar upload By: Riklaunim on Fri, 19 August 2005 09:08
		Re: avatar upload By: Ilia on Fri, 19 August 2005 13:30
		Re: avatar upload By: Riklaunim on Sat, 20 August 2005 08:55
		Re: avatar upload By: naudefj on Wed, 20 May 2009 11:20

Previous Topic:	Maillist.php patch for pure html mails
Next Topic:	NNTP - Conversion of special characters (UTF-8) doesn't work

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri Sep 27 18:49:51 GMT 2024

Total time taken to generate the page: 0.03920 seconds