http://josephkeeler.com/2009/04/php-upload-security-the-1x1-jpeg-hack/ PHP/LAMP Development and Software Process Improvement Tue, 22 Feb 2011 19:14:37 +0000 hourly 1 http://wordpress.org/?v=3.3.1 http://josephkeeler.com/2009/04/php-upload-security-the-1x1-jpeg-hack/comment-page-1/#comment-1223 Makavillian Tue, 22 Feb 2011 19:14:37 +0000 http://josephkeeler.com/?p=3#comment-1223 Great post, I wasn't aware of this either. Great post, I wasn’t aware of this either.

]]> http://josephkeeler.com/2009/04/php-upload-security-the-1x1-jpeg-hack/comment-page-1/#comment-1107 paul Thu, 06 Jan 2011 18:04:19 +0000 http://josephkeeler.com/?p=3#comment-1107 Never even gave that a thought...naively thought mime types could be relied on....now changing my image upload class. There must be a hell of a lot of unsecured upload scripts out there! Never even gave that a thought…naively thought mime types could be relied on….now changing my image upload class. There must be a hell of a lot of unsecured upload scripts out there!

]]> http://josephkeeler.com/2009/04/php-upload-security-the-1x1-jpeg-hack/comment-page-1/#comment-1059 Nikos Sun, 12 Dec 2010 09:02:37 +0000 http://josephkeeler.com/?p=3#comment-1059 This handles nicely that php code will not be executed. how about xss? This handles nicely that php code will not be executed. how about xss?

]]> http://josephkeeler.com/2009/04/php-upload-security-the-1x1-jpeg-hack/comment-page-1/#comment-8 Phillip Harrington Sat, 16 May 2009 01:42:59 +0000 http://josephkeeler.com/?p=3#comment-8 I actually considered doing this - renaming, reprocessing the image and appending a new extension. I was not, however, aware of this attack - or of the fix. Thanks for this article! Keep it up! I'm enjoying very much the security and optimization focus of your first few entries. And as promised, I'm subscribing! I actually considered doing this – renaming, reprocessing the image and appending a new extension. I was not, however, aware of this attack – or of the fix. Thanks for this article! Keep it up! I’m enjoying very much the security and optimization focus of your first few entries. And as promised, I’m subscribing!

]]>