简体中文(ZH-CN) English(EN) 繁体中文(ZH-TW) 日本語(JA) 한국어(KO) Melayu(MS) Français(FR) Deutsch(DE)
Home > Backend Development > PHP Tutorial > body text

请问$_FILES 是否可以伪造,应该注意哪些安全问题;

WBOY
Release： 2016-06-23 13:40:38
Original
861 people have browsed it

1.
$_FILES 是用户浏览器提交的数据,用户是否可以恶意修改$_FILES数组?
  恶意: 上传的文件名会不会出现 特殊字符. 


回复讨论(解决方案)

完全可以把.

字符是可以的。
只是在windows下不行。

$_FILES 不可被用户修改
只有傻瓜才会直接使用上传的文件名

Related labels：
请问$_FILES 是否可以伪造 应该注意哪些安全问题;
source：php.cn
Previous article：微博关注用户表的设计 Next article：Android烧饼修改器v2.6.3。（首次打开会提示“应用程序有新版本更新”，点击退出就. http://www.sbtools.org/forum.php?mod=viewthread&tid
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Latest Articles by Author
Latest Issues
Choose the appropriate application architecture to handle bearer tokens I want to use an API that uses OAuth2.0 In short, I need to obtain an access token that I ...
From 2024-04-04 08:55:57
0
1
353
Related Topics
More>
Popular Recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template
About us Disclaimer Sitemap
php.cn：Public welfare online PHP training，Help PHP learners grow quickly！