0
votes
0answers
54 views

Malicious Resources on Linux Server?

When creating a website, I often include custom fonts (which I upload via FTP and reference via CSS). I get these font files from various locations on the web. I was wondering: is it possible for a ...
-2
votes
1answer
404 views

Should I use ClamAV?

I installed ClamAV and PHP-ClamAV on my Ubuntu server. Everything works... But it is extremely slow. Even when I just call basic functions without scanning a file. So it got me wandering if I really ...
0
votes
1answer
460 views

Allowing any file to upload on server and security risks

We are having a project that allows users to backup there data to server through php upload,running on Linux server. If users upload any executable file it will be automatically renamed to some ...
2
votes
1answer
136 views

Prevent PHP from allowing php script uploads

Running Solaris/Apache/PHP. Our user base needs to be able to upload files to the web servers, so we have to have php uploads enabled. Problem comes when users provide upload scripts that aren't ...
0
votes
2answers
313 views

User uploaded files on different server with PHP?

If I had a dozen "Work" servers with just PHP-FPM (with other Nginx servers in front), is it possible to setup PHP to store user uploaded files on a different server? I'm looking to avoid syncing ...
0
votes
2answers
480 views

Apache Uploads and Security

Recently it has become an issue that a user on one of our systems needs the ability to have the apache user have read and write capability to their site so that the upload portion of their site works ...
1
vote
1answer
3k views

How to use max_post_size and upload_max_filesize in an Apache <Location> directive?

My users want to upload large files (50-100MB) in the CMS backend of a PHP web application. I could adjust the upload_max_filesize and post_max_size settings for PHP globally in this virtual host, but ...
3
votes
8answers
196 views

Our web-developers have a project that requires accepting file-uploads. What should I ensure is covered?

A recent project requires one of our websites to accept file uploads from (logged in) users (primarily images and possibly some video). What are some (generic) things we need to take into account, ...