[hellomen]

Ha! I found the error! You have a typo in one of the two variables
Have a look yourself:
$extensions
$extentions - missing a S

AAAAH fudge!
thats why I don't really like PHP XD

you are my angel

http://url4img.tk/

try it out with a JPG and a PNG

Your next step is looking into mime types and allowing / denying uploads depending on the mime type.
(Because you could have a serious vulnerability right now )
Have a look here: https://www.owasp.org/index.php/Unrestri...ile_Upload

it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...

[hellomen]

Ha! I found the error! You have a typo in one of the two variables
Have a look yourself:
$extensions
$extentions - missing a S

AAAAH fudge!
thats why I don't really like PHP XD

you are my angel

http://url4img.tk/

try it out with a JPG and a PNG

Your next step is looking into mime types and allowing / denying uploads depending on the mime type.
(Because you could have a serious vulnerability right now )
Have a look here: https://www.owasp.org/index.php/Unrestri...ile_Upload

it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...

[hellomen]

Ha! I found the error! You have a typo in one of the two variables
Have a look yourself:
$extensions
$extentions - missing a S

AAAAH fudge!
thats why I don't really like PHP XD

you are my angel

http://url4img.tk/

try it out with a JPG and a PNG

Your next step is looking into mime types and allowing / denying uploads depending on the mime type.
(Because you could have a serious vulnerability right now )
Have a look here: https://www.owasp.org/index.php/Unrestri...ile_Upload

it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...

[hellomen]

Ha! I found the error! You have a typo in one of the two variables
Have a look yourself:
$extensions
$extentions - missing a S

AAAAH fudge!
thats why I don't really like PHP XD

you are my angel

http://url4img.tk/

try it out with a JPG and a PNG

Your next step is looking into mime types and allowing / denying uploads depending on the mime type.
(Because you could have a serious vulnerability right now )
Have a look here: https://www.owasp.org/index.php/Unrestri...ile_Upload

it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...

[hellomen]

Ha! I found the error! You have a typo in one of the two variables
Have a look yourself:
$extensions
$extentions - missing a S

AAAAH fudge!
thats why I don't really like PHP XD

you are my angel

http://url4img.tk/

try it out with a JPG and a PNG

Your next step is looking into mime types and allowing / denying uploads depending on the mime type.
(Because you could have a serious vulnerability right now )
Have a look here: https://www.owasp.org/index.php/Unrestri...ile_Upload

it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...

[1llusion]

it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...

Unless you changed the way you check for this stuff, it is still vulnerable.

Best explanation is here (also with good pointers): http://security.stackexchange.com/questi...pload-form

[1llusion]

it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...

Unless you changed the way you check for this stuff, it is still vulnerable.

Best explanation is here (also with good pointers): http://security.stackexchange.com/questi...pload-form

[1llusion]

it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...

Unless you changed the way you check for this stuff, it is still vulnerable.

Best explanation is here (also with good pointers): http://security.stackexchange.com/questi...pload-form

[1llusion]

it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...

Unless you changed the way you check for this stuff, it is still vulnerable.

Best explanation is here (also with good pointers): http://security.stackexchange.com/questi...pload-form

[1llusion]

it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...

Unless you changed the way you check for this stuff, it is still vulnerable.

Best explanation is here (also with good pointers): http://security.stackexchange.com/questi...pload-form