Secure File Uploads?
Thursday January 4, 2007
Allowing users to upload files to your website is always going to be a risk. That being said, there are some things you can do to somewhat reduce the risk. Have you taken other security measures on your file uploads? If so, please share them!
You can:
Create a random named folder.
Rename the file once uploaded randomly.
Save the random named file in the random named folder.
Check extensions.
Append a fake extension to the file once uploaded, like oqie213.txt.safe