An HTML form contains this form element:

<input type="file" name="myFile" /> When this form is submitted, the following PHP code gets executed:

move_uploaded_file( $_FILES['myFile']['tmp_name'], 'uploads/' . $_FILES['myFile']['name'] ); Which of the following actions must be taken before this code may go into production? (Choose 2)

Question

An HTML form contains this form element:

<input type="file" name="myFile" /> When this form is submitted, the following PHP code gets executed:

move_uploaded_file( $_FILES['myFile']['tmp_name'], 'uploads/' . $_FILES['myFile']['name'] ); Which of the following actions must be taken before this code may go into production? (Choose 2)

Accepted Answer

B. Sanitize the file name in $_FILES['myFile']['name'] because this value is not consistent among D. Sanitize the file name in $_FILES['myFile']['name'] because this value could be forged

Answer

A. Check with is_uploaded_file() whether the uploaded file $_FILES['myFile']['tmp_name'] is valid

Answer

C. Check the charset encoding of the HTTP request to see whether it matches the encoding of the

Answer

E. Use $HTTP_POST_FILES instead of $_FILES to maintain upwards compatibility

An HTML form contains this form element: <input type="file" name="myFile" /> When this form is submitted, the following PHP code gets executed: move_uploaded_file( $_FILES['myFile']['tmp_name']…

Question

Options

How the community answered

Community Discussion