PDA

View Full Version : .htaccess no-nos?


nix
09-09-2005, 05:16 PM
I just put this into my .htaccess

AddType application/x-httpd-php .png

Is that safe though? What if I wanted to add an image upload to my site, and someone sniffing around uploaded a .png file with a php script in it, and did something malicious? Is that an issue? The only reason I did that is for my sig picture. I'm sure putts has something wise to say, as his sig is also built off server side tech. Although you use asp, putts. :thumbdn: hehe. :rofl:

NerdLib
12-09-2005, 01:17 PM
This is a very bad idea. You would allow somone on an upload form to use png's as PHP and execute PHP code.