The vulnerability of the PHP built-in function getimagesize () today's program wants to compress some images and obtain the width and height of the images. on the Internet, I checked which functions can be used, and then I saw the getimagesize () function. However, when my colleagues see this function, they remind me that this function is not allowed by Operation colleagues. In my heart, I checked it online. The vulnerability of this function was found.
Vulnerability Information
PHP is a script language for embedding HTML documents on the server.
The PHP Getimagesiz function is used to determine the image size and receive a URI parameter. Getimagesize () does not implement any function to verify whether the image or size of the downloaded file on the remote server exceeds expectations, PHP can be used to download large files, resulting in DoS attacks.
