File Uploads.

[mhoctober]

Guys...

I'm attempting to write code that allows users to easily upload files to my server.

My dilema of courses is that I dont want to offer a security breach.

I'm thinking of creating a form tha calls a .php file that handles the upload.

Does anyone have any thoughts on this?

The website that I am building will reply very heavily on the ability of new unknown users loading files to the server.

Once loaded however they will be quickly screened and deleted once re-sized.

Any thoughts from anyone would be most welcome as this is a critical milestone in the project.

[coopster]

File uploading is a common practice and yes of course, there is always a security risk. There are all kinds of things you can do to monitor the file upload, including some editing to see if it is a picture file or not, etc.

There are some tips in our PHP Forum Library [webmasterworld.com] in a thread titled PHP Peer Code Review [webmasterworld.com] that may prove useful.