The Get-Post option...

Shari gypsyware at earthlink.net
Mon Feb 16 08:30:12 EST 2004


>you need to make sure that your webserver supports file uploads, and then
>you'll need to take a look at where the file gets transfered to.. (in PHP
>it gets uploaded to the TEMP folder and needs to get moved after)..
>
>-Sean

I believe it does.  But this opens up another question... using FTP 
to upload files, wouldn't that mean my program would have to have my 
username and password built into it?  Doesn't sound like a very 
secure option.

I've been hearing some rather disturbing things about using options 
that let people upload or change files on my website.  It sounds like 
if I do anything where I must set the file permissions to 
"read/write" it could open up a very serious security hole.  My web 
host says that people could theoretically upload actual programs that 
would execute and that could do all sorts of things both to my 
website and out into the world at large, and actually create worms 
and viruses that run from my website.

As for moving a file from the TEMP folder, can this also be done from .php?

Can the TEMP folder be read as any other URL can?
-- 
--Shareware Games for the Mac--
http://www.gypsyware.com


More information about the metacard mailing list