Types of files being uplodaded
Posted: Fri Mar 11, 2011 11:43 am
I have used the previous version of daddy script and I stoped using this great script because my website got hacked a few times.
The reason was:
The script allowed users to upload .php files .exe files or any other extension.
Somehow they were able to run this files into my site and collect data such as passwords and usersnames.
In my opinion this was a major bug which lead my websites being hacked for 3-4 times.
If there is an feature or bug fix which it will allow users to upload any file but not let them "run" into the server this will be great.
Thanks
p.s. if this bug has been fixed sorry for opening the same topic again.
The reason was:
The script allowed users to upload .php files .exe files or any other extension.
Somehow they were able to run this files into my site and collect data such as passwords and usersnames.
In my opinion this was a major bug which lead my websites being hacked for 3-4 times.
If there is an feature or bug fix which it will allow users to upload any file but not let them "run" into the server this will be great.
Thanks
p.s. if this bug has been fixed sorry for opening the same topic again.