+- Sinisterly (https://sinister.ly)
+-- Forum: Coding (https://sinister.ly/Forum-Coding)
+--- Forum: PHP (https://sinister.ly/Forum-PHP)
+--- Thread: [*FIXED*] Issue with in_array() [strange] (/Thread-FIXED-Issue-with-in-array-strange)
RE: Issue with in_array() [strange] - hellomen - 10-29-2013
(10-29-2013, 12:19 AM)1llusion Wrote:(10-28-2013, 11:54 PM)hellomen Wrote:(10-28-2013, 11:18 PM)1llusion Wrote: Ha! I found the error! You have a typo in one of the two variables
Have a look yourself:
$extensions
$extentions - missing a S
AAAAH fudge!
thats why I don't really like PHP XD
you are my angel
http://url4img.tk/
try it out with a JPG and a PNG
Your next step is looking into mime types and allowing / denying uploads depending on the mime type.
(Because you could have a serious vulnerability right now)
Have a look here: https://www.owasp.org/index.php/Unrestricted_File_Upload
it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...
RE: Issue with in_array() [strange] - hellomen - 10-29-2013
(10-29-2013, 12:19 AM)1llusion Wrote:(10-28-2013, 11:54 PM)hellomen Wrote:(10-28-2013, 11:18 PM)1llusion Wrote: Ha! I found the error! You have a typo in one of the two variables
Have a look yourself:
$extensions
$extentions - missing a S
AAAAH fudge!
thats why I don't really like PHP XD
you are my angel
http://url4img.tk/
try it out with a JPG and a PNG
Your next step is looking into mime types and allowing / denying uploads depending on the mime type.
(Because you could have a serious vulnerability right now
Have a look here: https://www.owasp.org/index.php/Unrestricted_File_Upload
it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...
RE: Issue with in_array() [strange] - hellomen - 10-29-2013
(10-29-2013, 12:19 AM)1llusion Wrote:(10-28-2013, 11:54 PM)hellomen Wrote:(10-28-2013, 11:18 PM)1llusion Wrote: Ha! I found the error! You have a typo in one of the two variables
Have a look yourself:
$extensions
$extentions - missing a S
AAAAH fudge!
thats why I don't really like PHP XD
you are my angel
http://url4img.tk/
try it out with a JPG and a PNG
Your next step is looking into mime types and allowing / denying uploads depending on the mime type.
(Because you could have a serious vulnerability right now
Have a look here: https://www.owasp.org/index.php/Unrestricted_File_Upload
it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...
RE: Issue with in_array() [strange] - hellomen - 10-29-2013
(10-29-2013, 12:19 AM)1llusion Wrote:(10-28-2013, 11:54 PM)hellomen Wrote:(10-28-2013, 11:18 PM)1llusion Wrote: Ha! I found the error! You have a typo in one of the two variables
Have a look yourself:
$extensions
$extentions - missing a S
AAAAH fudge!
thats why I don't really like PHP XD
you are my angel
http://url4img.tk/
try it out with a JPG and a PNG
Your next step is looking into mime types and allowing / denying uploads depending on the mime type.
(Because you could have a serious vulnerability right now
Have a look here: https://www.owasp.org/index.php/Unrestricted_File_Upload
it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...
RE: Issue with in_array() [strange] - hellomen - 10-29-2013
(10-29-2013, 12:19 AM)1llusion Wrote:(10-28-2013, 11:54 PM)hellomen Wrote:(10-28-2013, 11:18 PM)1llusion Wrote: Ha! I found the error! You have a typo in one of the two variables
Have a look yourself:
$extensions
$extentions - missing a S
AAAAH fudge!
thats why I don't really like PHP XD
you are my angel
http://url4img.tk/
try it out with a JPG and a PNG
Your next step is looking into mime types and allowing / denying uploads depending on the mime type.
(Because you could have a serious vulnerability right now
Have a look here: https://www.owasp.org/index.php/Unrestricted_File_Upload
it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...
RE: Issue with in_array() [strange] - 1llusion - 10-29-2013
(10-29-2013, 12:26 AM)hellomen Wrote: it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...
Unless you changed the way you check for this stuff, it is still vulnerable.
Best explanation is here (also with good pointers): http://security.stackexchange.com/questions/32852/risks-of-a-php-image-upload-form
RE: Issue with in_array() [strange] - 1llusion - 10-29-2013
(10-29-2013, 12:26 AM)hellomen Wrote: it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...
Unless you changed the way you check for this stuff, it is still vulnerable.
Best explanation is here (also with good pointers): http://security.stackexchange.com/questions/32852/risks-of-a-php-image-upload-form
RE: Issue with in_array() [strange] - 1llusion - 10-29-2013
(10-29-2013, 12:26 AM)hellomen Wrote: it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...
Unless you changed the way you check for this stuff, it is still vulnerable.
Best explanation is here (also with good pointers): http://security.stackexchange.com/questions/32852/risks-of-a-php-image-upload-form
RE: Issue with in_array() [strange] - 1llusion - 10-29-2013
(10-29-2013, 12:26 AM)hellomen Wrote: it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...
Unless you changed the way you check for this stuff, it is still vulnerable.
Best explanation is here (also with good pointers): http://security.stackexchange.com/questions/32852/risks-of-a-php-image-upload-form
RE: Issue with in_array() [strange] - 1llusion - 10-29-2013
(10-29-2013, 12:26 AM)hellomen Wrote: it is accepting: image/jpg image/jpeg and image/gif which are mime types
all other types are yet blocked out...
Unless you changed the way you check for this stuff, it is still vulnerable.
Best explanation is here (also with good pointers): http://security.stackexchange.com/questions/32852/risks-of-a-php-image-upload-form