Home/ Questions/Q 43557
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-10T15:30:50+00:00

Is there a way to prevent someone from faking a mime type on a

  • 0

Is there a way to prevent someone from faking a mime type on a file upload and then running a php/exe/etc…

I have to make the file upload directory writeable and executable so that the files can be stored, but this allows anyone to run a script after. One thing I can do is add random data to the file name so they can’t guess the file name after (since they still can’t read from the directory to get a listing).

I’m using file upload with php for the first time and I’m trying to cover all of the security issues.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. The file upload directory should not be accessible to the web browser. I.e. don’t allow somebody to upload a file, say ‘remove_all_my_files.php‘, and then execute it on your system by giving the url to it, say ‘http://xample.com/uploads/remove_all_my_files.php‘.

    • 0