exe file upload prevention
In my project i have created a file upload.Now it i开发者_开发百科s required that any exe file or exe file in a zip folder having .zip as extension, be prevented from being uploaded. Can someoe suggest me a solution?
For each of your task, you have to implement separate algorithm for check.
- Check extension before upload (see possible duplicate question)
- Check that uploaded zip is really an archive (mime type, libmagic, etc)
- Check that uploaded archive doesn't contain exe (unzip it, see previous paragraph)
精彩评论