Hi and thanks for your efforts.
I just have a question, I noticed that the imported folder has to be chmod to 777, however all the imported files are automatically chmod to 644.
In this case, if a user posts an "infected" image that contains a php script or malicious code, are they blocked by chmod 644 or is there still a chance that the code gets executed when the hacker opens the url mysite.com/images/imported/infectedfile.png ?
Thanks
|