Multiple choice › File attacks
File attacks
1. File attacks
Which measure BEST protects user files on a server from file attacks such as malicious uploads?
- Give every user administrator rights to the upload folder
- Run uploaded files automatically to check they work
- Allow any file type so users are not inconvenienced
- Restrict file types and size, scan uploads and store them outside the web root with limited permissions
Answer
D
Limit what can be uploaded, scan it, and never let uploaded content execute or sit with excessive permissions.