Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

cant upload an avatar-jpg with .jpeg as endin

#2

cant upload an avatar-jpg with .jpeg as ending. do you check about jpg only by filename ? this is a security hole.

Reported by Brian Jesse Hendrickson · August 27th, 2008 @ 02:15 AM

State: resolved
Milestone: 0.1
Assigned to: Brian Jesse Hendrickson Brian Jesse Hendrickson

Activity

  1. Brian Jesse Hendrickson
    Brian Jesse Hendrickson
    • State changed from new to resolved

    new code uses exif_imagetype() to verify uploaded filetype

    September 1st, 2008 @ 07:18 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.