From: Reini U. <ru...@x-...> - 2007-03-10 18:39:11
|
2007/3/9, Manuel Vacelet <man...@gm...>: > 2007/3/9, Sabri LABBENE <sab...@st...>: > > BTW, we also turned off getimagesize() because it make the page loading very > > slow. Will there be then any risk related to spam prevention ? > > In a intranet there is no risk. There's still the cockpit error risc. The risc of unaware users, who just upload .vbs files as one just did yesterday in my companies' super-secure intranet. Thanksfully we had the extension check. After renaming the .vbs to .vbs_ he could upload it, and users could download it without immediate execution. -- Reini Urban http://phpwiki.org/ http://murbreak.at/ http://spacemovie.mur.at/ http://helsinki.at/ |