The Get-Post option...
Shari
gypsyware at earthlink.net
Mon Feb 16 08:30:12 EST 2004
>you need to make sure that your webserver supports file uploads, and then
>you'll need to take a look at where the file gets transfered to.. (in PHP
>it gets uploaded to the TEMP folder and needs to get moved after)..
>
>-Sean
I believe it does. But this opens up another question... using FTP
to upload files, wouldn't that mean my program would have to have my
username and password built into it? Doesn't sound like a very
secure option.
I've been hearing some rather disturbing things about using options
that let people upload or change files on my website. It sounds like
if I do anything where I must set the file permissions to
"read/write" it could open up a very serious security hole. My web
host says that people could theoretically upload actual programs that
would execute and that could do all sorts of things both to my
website and out into the world at large, and actually create worms
and viruses that run from my website.
As for moving a file from the TEMP folder, can this also be done from .php?
Can the TEMP folder be read as any other URL can?
--
--Shareware Games for the Mac--
http://www.gypsyware.com
More information about the metacard
mailing list