Securing Image Uploads

This website contains links to software which is either no longer maintained or will be supported only until the end of 2019 (CKFinder 2). For the latest documentation about current CKSource projects, including software like CKEditor 4/CKEditor 5, CKFinder 3, Cloud Services, Letters, Accessibility Checker, please visit the new documentation website.

If you look for an information about very old versions of CKEditor, FCKeditor and CKFinder check also the CKEditor forum, which was closed in 2015. If not, please head to StackOverflow for support.

(<pre> changed to <source> with ASP syntax coloring)
 
Line 1: Line 1:
−
{{Ckfinder_2.x Image upload Description|code=<pre>CKFinder_Config.Add "SecureImageUploads", true</pre>}}
+
{{Ckfinder_2.x Image upload Description|code=<source lang="asp">CKFinder_Config.Add "SecureImageUploads", true</source>}}

Latest revision as of 13:30, 29 March 2011

Sometimes a user can try to upload a file which is not an image file but appears to be one. Example: You have a text file called document.jpeg and you try to upload it. You can enable the image checking function by setting it to true in the following way: 

CKFinder_Config.Add "SecureImageUploads", true

With this configuration the program will check the dimensions of the file. If they equal zero, then the file is considered to not be an image and it will be rejected be CKFinder.

Retrieved from "https://docs-old.ckeditor.com/index.php?title=CKFinder_2.x/Developers_Guide/ASP/Configuration/Security/Image_uploads&oldid=5998"
This page was last edited on 29 March 2011, at 13:30.