Page 1 of 1

Security risks of uploading images with php

PostPosted: 27. October 2004 08:12
by insomn3ak
Part of my clients backend mainanance for his site involves uploading images to his server. This function works fine on my testing server, but I get this error whenever I try it on the live site:

Target Dir: /home/nspace/public_html/images/
/home/nspace/public_html/images/ is not writable!
Cant copy /tmp/php2Lr2hf to /home/nspace/public_html/images/25_1.jpg

I assume that I need to make the images folder writable on the live server, but my question is...are there any security risks in doing that? If so, how do I make it so that only he can access the images folder from his backend website?

Thanks for any help anyone can give.

PostPosted: 01. November 2004 20:42
by JonathanS
I'd say a basic bit of PHP to check the file extention,
making sure only certain ones are allowed through.

If you do that, I wouldn't think it'd be a security risk.
I may be wrong of course.