how to be secure with file uploads...

[eluser]devbro[/eluser]
[quote author="Wuushu" date="1249335948"][quote author="shawnhenry" date="1249335072"]PHP makes uploading files easy. You can upload any type of file to your Web server. But with ease comes danger and you should be careful when allowing file uploads.

In spite of security issues that should be addressed before enabling file uploads, the actual mechanisms to allow this are straight forward. In this tutorial we will consider how to upload files to some directory on your Web server. We will also discuss security issues concerned with the file uploading.[/quote]

What tutorial.. ?[/quote]

there are a lot of tutorial for file upload. just check the upload class for one .

I also have one more suggestion that can be useful. if you have access to .htaccess disable all types of executions in your upload folder, so if a php file is in your upload folder it would spit out the code.same for .pl .cgi and other stuff.

this way even if they manage to upload something dangerous to your server it will no be executed at all.