My fellow perlaholics,

Recently (today, in fact), I finished with my file upload script. I didn't do it on my own and have a few monks to thank for their assistance (Mr. Muskrat, jdporter, and a couple others whose names escape me at the moment). Although I have a working script that does what I want it to, it still needs to be cleaned up as I would like it to be easier to read and have fewer lines. But, that is not why I am writing this.

The real reason for this node is for some advice. I have written into it a section that alters the name of the file uploaded and another that will only allow certain TYPES of files to be uploaded (thanks to jdporter on that one... he didn't give me the answer, but his help led me to write my own). I do both of these things for security reasons. My big question: Is there anything else I should consider adding to the script to furthur the security?

Thanks for your time,
_____________________________________________________
mojobozo
word (wûrd)
interj. Slang. Used to express approval or an affirmative response to
something. Sometimes used with up. Source

In reply to Thoughts on file upload... by mojobozo

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.