Is any of this PHP code vulnerable to arbitrary file upload?
I have two files. One for uploading an image via file, and another for
uploading an image via url. Is there any way of bypassing the checks to be
able to perform arbitrary file upload?
Here is the code for uploading locally: http://pastebin.com/8LFiA6K9
Here is code for uploading via url: http://pastebin.com/MTVXMKyz
I get an invalid url error for non-image files, so I assume its somewhat
safe. And I also assume the regex check in the first file is safe too.
No comments:
Post a Comment