July 24, 200917 yr Hey guys. As I'm slowly working on making more sites to add to my portfolio, I thought I would share my site with you. Recently I added a bit.ly addon that converts the url to bit.ly for twitter etc. Instant-Upload I really hope you consider using it. Any questions, please ask or private message me
July 24, 200917 yr You should provide the following information and it needs to be easily accessible to people: Terms Of Use Privacy Policy Contact Details What happens if people upload porn or indecent images of kids for example? You need to have a policy in place that makes it clear what you do with people's pics if it contravenes your terms of use.
July 24, 200917 yr Well, it does what it says it will very nicely! Is this a permanent upload, or do you purge the server to remove older images?
July 24, 200917 yr Author You should provide the following information and it needs to be easily accessible to people: Terms Of Use Privacy Policy Contact Details What happens if people upload porn or indecent images of kids for example? You need to have a policy in place that makes it clear what you do with people's pics if it contravenes your terms of use. @cinnamondm Permanent. Very true. Well if anyone uploads racist images, they get replaced with Censoring Images. But as you say, I suppose I do need to introduce Terms of Use. Thanks for your feedback and I will write them ASAP.
July 24, 200917 yr Yeah it does what it's supposed to do, but the design is too plain. looks boring! I would re-design it if I were you!
July 24, 200917 yr Make sure you implement upload security. For you if you haven't (although assuming you have) or for the GP for future advice: 1) Check file type - simply using the MIME function ($_FILES['fieldname']['type']) can not be trusted, IE headers can easily be faked. Read the file contents and determine from that, also use getimagesize() to determine if the file is truly an image. Also check file extentions, blacklist all and reject all that show up as anysort of .php, .pl or .js extention. 2) Use a virus scan; http://www.phpantivirus.com/ Refer to this for future reference on security, v. good: http://www.scanit.be...file-upload.pdf If you follow everything outlined in that PDF you'll be as secure as possible.
July 27, 200917 yr Author Yeah it does what it's supposed to do, but the design is too plain. looks boring! I would re-design it if I were you! Well it's meant to load fast etc. Make sure you implement upload security. For you if you haven't (although assuming you have) or for the GP for future advice: 1) Check file type - simply using the MIME function ($_FILES['fieldname']['type']) can not be trusted, IE headers can easily be faked. Read the file contents and determine from that, also use getimagesize() to determine if the file is truly an image. Also check file extentions, blacklist all and reject all that show up as anysort of .php, .pl or .js extention. 2) Use a virus scan; http://www.phpantivirus.com/ Refer to this for future reference on security, v. good: http://www.scanit.be...file-upload.pdf If you follow everything outlined in that PDF you'll be as secure as possible. I don't use the MIME function... Lol. The extension gets checked. It HAS to be an image. If it is then it proceeds and renames it and adds the extension on the end. It's secured from PHP / exe etc.
Create an account or sign in to comment