May 6, 200917 yr What are the risks with having an image upload form accessible by anyone? I have a project where it would work really well to have it but am not sure if it may be abused by people uploading junk.
May 6, 200917 yr What are the risks with having an image upload form accessible by anyone? I have a project where it would work really well to have it but am not sure if it may be abused by people uploading junk. Are the uploaded images publicly viewable after upload? That would be a little risky as you say..
May 6, 200917 yr If you handle it correctly with the right parameters and validation there are no risks at all! I'd be checking things such as : > File extensions and types > Max File size > Amount of uploads per IP per hour/minute/day etc > Amount of visits per hour/minute/day etc... > Normal form validation (http refferrer / http request method etc). Basically if you do it properly there is no risk whatsoever ... if your going to do a half hearted job and not validate correctly then you may aswell set up an anonymous ftp account to your server
May 6, 200917 yr Author If you handle it correctly with the right parameters and validation there are no risks at all! I'd be checking things such as : > File extensions and types > Max File size > Amount of uploads per IP per hour/minute/day etc > Amount of visits per hour/minute/day etc... > Normal form validation (http refferrer / http request method etc). Basically if you do it properly there is no risk whatsoever ... if your going to do a half hearted job and not validate correctly then you may aswell set up an anonymous ftp account to your server They wont be publicly available and as always will be validated. I guess storing the IP & Time of upload is a must. Basically the customers are sending the business a picture.. I thought if it was behind registration then it would discourage them from making an enquiry.
Create an account or sign in to comment