Allowing to upload image

Is it wise?

[fashezee]

I have a site that requires users to provide an image for their product.
I am contemplating whether to have a feature on the site that allows
users to upload there image or just have them sent via email.

However, I am skeptical about the upload feature this due to the bandwidth
and cpu resources it will consume? Anyone have an experience with
allowing users to upload images. Did it work out for you?

[Edouard_H]

I use a perl script on a few sites that allows for maximum file size and specification of permitted file types. Uploaded images go to one directory only, which I keep a close eye on. I also restrict access to upload forms and include information about format and file size. Under these conditions I've had no problems.

[dropoffx]

Be very careful with your upload code. Make sure that you have a lot of error checking in place to disallow users from uploading malicous PHP or other scripting code and executing it.

[aspdaddy]

I use a component if possible that is optimised for security and speed such as ASPUpload or XUpload.

If you cant, then do the checks on size/file type and you may need to increase the script timeout settng for large uploads.

[davis]

You can do it in PHP very easily.... you just have to remember to set your file size down low...

If you put it in a semi-private directory, you shouldnt have to much of a problem with unwanted people uploading unwanted things... if you do, just put a simple password on it :)

Just my thoughs :)