See Image::Size. Also, of course, setting +r and only +r is the appropriate permission for "uploaded images" (or rather, any user content). You certainly almost never want to be executing "uploaded content". Also consider running jpegtrans or any other resizer over the content, force-resizing it to discard all metadata etc. from the image.