Secure File Upload in PHP Applications

http://www.scribd.com/vacuum?url=http://www.scanit.be/uploads/php-file-upload.pdf

by brentr • 18 years ago

9 7 18 years ago

brooksbp3• 18 years ago

One thing this doesn't touch on is using a one-way hashing algorithm on your file uploads. This allows your application to do another layer of verification. This also obscures filenames so that they cannot be easily indexed (e.g. Google search engine...)

brentr2• 18 years ago

Do you have any helpful links on a one-way hashing algorithm?

brooksbp3• 18 years ago

By one-way I mean md5 or sha1. They're extremely useful for one-way validation in cryptography/security. Applications of these are storing passwords (e.g. normally you should salt and hash passwords before storing them in a database) SHA is usually stronger (~160 bits) than md5 (~128 bits). Although, weaknesses have recently been found (~2005?) in these algorithms; it's easier than predicted to find hash collisions. NIST is sponsoring the creation of successor functions to these current one-way hashing algorithms.

http://en.wikipedia.org/wiki/SHA_hash_functions

http://developers.slashdot.org/developers/04/12/07/2019244.s...

tlrobinson• 18 years ago

PDF: http://www.scanit.be/uploads/php-file-upload.pdf

Secure File Upload in PHP Applications

Related Stories