Level 122
No, nothing as standard. Validate using Mime types and don't use anything provided by the user (filename or extension)
1 like
Sep 4, 2024
4
Level 4
Does Laravel come with a set of instrument to check uploaded files?
Hello,
When it comes to uploading files I'm always paranoid about security. All users are malicious to my eyes. I'm exaggerating, I know.
I'm going to upload files (videos and pictures) using a form. Is there any tools offered by Laravel to check the integrity of the files? I example if images are real images and videos are real videos?
Mime-type can be spoofed. So maybe something deeper.
Thanks, Simon
Level 75
Level 73
And you should probably scan it too.
1 like
Level 122
And put the file in a place that cannot be opened from the web.
1 like
Please or to participate in this conversation.