File fragmentation on the cross, when the entire file is not fully uploaded to the server, how the service side to determine whether the file is a legitimate format, such as only allow uploading pictures, hacker through the tool to upload the other, this time shards. Server fully received after the judgment???? Isn't that too inefficient?
Reply content:
File fragmentation on the cross, when the entire file is not fully uploaded to the server, how the service side to determine whether the file is a legitimate format, such as only allow uploading pictures, hacker through the tool to upload the other, this time shards. Server fully received after the judgment???? Isn't that too inefficient?
PHP may not be able to, through PHP can only be uploaded to the end of the complete file, can not be based on byte stream to judge in advance.
Nginx as a Web server theoretically feasible, but you need to develop the Nginx plug-in, and by judging the first byte to determine whether it is a real picture.