Help with is_uploaded_file

[noppid]

Originally Posted by Dark Visor

Like what? Plus, using preg_replace and preg_match I could check that the file is really remote..

Or can files that are not normally accessible be opened via fopen?

There are approximatly 67 ways to exploit your site using fopen libs to access remote files. That's just the tip of the iceburg.

You can ruin the end users experience if the remote file fails as well.

http://blog.unitedheroes.net/archives/p/1630/

http://us2.php.net/manual/en/ref.curl.php

The other issues I guess are related to trying to hook into the vB API to create an attachment? I'm not sure with the little code snippet you posted.