An HTML form contains this form element: When this form is submitted, the following PHP code gets executed: move_uploaded_file( $_FILES['myFile']['tmp_name'], 'uploads/' . $_FILES['myFile'][ ]['name'] ); Which of the following actions must be taken before this code may go into production? (Choose two.)

Question

An HTML form contains this form element:

When this form is submitted, the following PHP code gets executed:

move_uploaded_file(
 $_FILES['myFile']['tmp_name'],
 'uploads/' . $_FILES['myFile'][ ]['name']
);

Which of the following actions must be taken before this code may go into production? (Choose two.)

Accepted Answer

B. Sanitize the file name in $_FILES['myFile']['name'] because this value is not consistent among web browsers D. Sanitize the file name in $_FILES['myFile']['name'] because this value could be forged

Answer

A. Check with is_uploaded_file() whether the uploaded file $_FILES['myFile']['tmp_name'] is valid

Answer

C. Check the charset encoding of the HTTP request to see whether it matches the encoding of the uploaded file

Answer

E. Use $HTTP_POST_FILES instead of $_FILES to maintain upwards compatibility

An HTML form contains this form element: <input type="file" name="myFile" /> When this form is submitted, the following PHP code gets executed: move_uploaded_file( $_FILES['myFile']['tmp_name']…

Question

Options

How the community answered

Topics

Community Discussion