Level 5
I am using below code in public folder htaccess
<FilesMatch "\.php$">
Order Allow,Deny
Deny from all
</FilesMatch>
<FilesMatch "index[0-9]?\.php$">
Order Allow,Deny
Allow from all
</FilesMatch>
1 like
Jan 16, 2021
4
Level 5
prevent php file execution inside users image folder in public
I found one php file inside public folder
Path is like below,
public/userprofilephoto/123123213.php
that code has image validation in laravel where only jpg or png file is allowed now if users trues to access this file directly in browser he will get a access to that file. how to prevent this?
Level 39
Level 5
accessing public image file directly in browser can able to view.
Level 39
normal that a user can view his files.
view is not execute.
Please or to participate in this conversation.