Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Virus scan - uploaded files

Status
Not open for further replies.

dle46163

IS-IT--Management
Jul 9, 2004
81
US
Hi All!

Does anyone know of a solution, other than ClamAv, to virus scan files uploaded with a PHP script? I'm running a Windows 2003 server with PHP / MySql.

Thanks!

 
I'm fairly sure I know how that would be done...Is there great security risk to doing so?
 
There might be some slight risk, depending on a lot of factors like your OS, filesystem and web server. But it shouldn't be anything appreciable.

When PHP accepts an uploaded file, it writes the file to a temporary location with a random filename and makes the original filename available to your script. So long as you manage reasonably well the files you upload by keeping them from being executed, the only real danger is to people who might download the files after others have uploaded them.



Want the best answers? Ask the best questions! TANSTAAFL!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top