When creating an uploading sharing site, is it possible that users may upload their own php scripts and have it run automatically even tho they don’t know where the website uploader put that script file? For instance if the website uploads your php file but names it a random name and puts it in a secret directory could this script still contact another server via some PHP OnLoad function? or does the script necessarily need to be executed by someone for it to run its contents?
When creating an uploading sharing site, is it possible that users may upload their
Share
A PHP script is not auto-runnable. I mean, It has to be executed by someone or something as a software on your computer needs to be executed by someone or something.
You can protect your upload directory with a htaccess to prevent the access/execution by your browser.