Gesior guilds script?

[Lucenzo]

Heya


Was checking the forum sometime ago and noticed people complained how guilds script is bugged and can be used to hack a server? If so, how can it be fixed? I'd like to have possibility of people uploading images for guilds, but would not like to get hacked x

guilds php


Thanks in Advance x x

 

[Cykotitan]

remote code exectution. they can upload images with PHP code inside, but not execute the code. unless you're using a php as fastcgi without fixing webserver (nginx/lighttpd) config or php.ini
still, it's better to validate the image in some ways, or even use an image processor like imagemagick to resize it to 64x64 for faster loading