Re: CGI File Upload Problems

Where are $username and $fileName coming from? If those are from user-supplied data, you have a very serious security hole here, one which could leave your system wide open to attackers.

Cheers,
Ovid

New address of my CGI Course.

Comment on Re: CGI File Upload Problems

Replies are listed 'Best First'.
Re^2: CGI File Upload Problems by jupe (Beadle) on Apr 04, 2007 at 19:12 UTC
well, it turns out that I Win Teh Intarweb today, cause the problem was being caused by some of my security related checks on input. thanks for all your help!	[reply]
Re^2: CGI File Upload Problems by jupe (Beadle) on Apr 04, 2007 at 18:51 UTC
$username is generated from user supplied info following very strict data sanitation (no special chars and a bunch of other checks for sql injection and other attacks). $filename is a basically int(rand(1000000))	[reply]