Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #9347

Re: Security risks allowing users to upload a css file?

Show all headers | View raw

On 5/14/2013 11:07 PM, Bhushan N.N wrote:
> Are there any security risks involved in allowing a user to upload a css file?
>
> I will be using the uploaded css file for a preview. Using another HTML template I already have on the server.
>

Uploading files always has security risks.  Even connecting to the 
internet has security risks.  The only way to not have any security risk 
is to not have any USB ports, DVD drives, etc. on the machine, lock the 
machine in a vault with no connection to the outside world, and don't 
give anyone the key.  Even then your machine isn't perfectly safe.

Of course, such a machine wouldn't be very useful.

There are always security risks.  You need to balance the risks vs. the 
rewards.

-- 
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Security risks allowing users to upload a css file? "Bhushan N.N" <bhushan154@gmail.com> - 2013-05-14 20:07 -0700
  Re: Security risks allowing users to upload a css file? Arno Welzel <usenet@arnowelzel.de> - 2013-05-15 12:12 +0200
  Re: Security risks allowing users to upload a css file? The Natural Philosopher <tnp@invalid.invalid> - 2013-05-15 11:26 +0100
  Re: Security risks allowing users to upload a css file? Jerry Stuckle <jstucklex@attglobal.net> - 2013-05-15 06:35 -0400
  Re: Security risks allowing users to upload a css file? Denis McMahon <denismfmcmahon@gmail.com> - 2013-05-15 12:44 +0000
  Re: Security risks allowing users to upload a css file? "Bhushan N.N" <bhushan154@gmail.com> - 2013-05-15 08:14 -0700

csiph-web