Have Geek Brain

How do I make the data loaded by PHP safe during transfer?

I am allowing authorized users to upload image files using my PHP application. Supposing I have created the necessary protection to make sure the file itself is valid, is there any way to intercept the http file in any way? If so, how can I secure the file transfer? Will HTTPS go?

In addition, the web server running the application can only be accessed by authenticated users. Does this mean that the HTTP data stream is also secure? It seems to me that this is so.

+1


a source to share


4 answers


If you are using HTTPS, all communication once the connection is established will be encrypted over SSL. This way, the download of files will be encrypted as well



+2


a source


If there is Main in The Middle , it can sniff the contents of the transferred file. You must use a secure connection to prevent this. So HTTPS will be the answer.



+1


a source


Yes, use HTTPS if you want to make sure the data cannot be intercepted.

+1


a source


also check if the uploaded file is actually an image and not a script.

0


a source






More articles:


All Articles