CodeIgniter 1.6.3 Maintenance and Security Release

[eluser]Pascal Kriete[/eluser]
Stensi, if you have anonymous users uploading binary files (such as pdfs) the best solution is to force a download on them. That way the browser never gets a chance to try and render it.

As for the test: without the is_image flag a cleaned version is returned - only with the flag will you ever get FALSE. If you run it without the flag, and display the result, the script should no longer execute. However, the process may corrupt pdfs even when they are clean, so a download is still your best bet.