Welcome! Log In Create A New Profile

Advanced

Re: Nginx and uploads

August 29, 2012 07:06AM
On Tuesday 28 August 2012 19:02:31 w00t wrote:
> This seems odd. If it wasn't meant for Nginx to process uploaded files,
> then it couldn't have processed them by itself.

You should do this task in your application and it's not odd (see below why).

[...]
> So I am inclined to think that there must be a way to set the filename
> without going to such lenghts as to change the code.

Just rename the uploaded file is not enough. You also need to validate its
content. Otherwise, you will open a potential security hole in your server.

wbr, Valentin V. Bartenev

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Nginx and uploads

w00t August 28, 2012 05:57AM

Re: Nginx and uploads

Ensiferous August 28, 2012 09:43AM

Re: Nginx and uploads

w00t August 28, 2012 11:02AM

Re: Nginx and uploads

Ensiferous August 29, 2012 12:51AM

Re: Nginx and uploads

VBart August 29, 2012 07:06AM

Re: Nginx and uploads

w00t August 30, 2012 06:30AM

Re: Nginx and uploads

agentzh August 30, 2012 03:14PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 315
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready