When I use imagefield to upload image , I found that if I select a image and press upload, then it will upload to my server. it's a correct action.
However, if I uploaded a wrong image, then I replace another one image and press upload button. the wrong image that I have uploaded still exist in my server.

I guess if a hacker create a script to replace replace ad replace image. then many image will upload to my server. also, some user actually upload the wrong image , that also use of the server space.

Comments

mecano’s picture

subscribing

greggles’s picture

Title: is it a security issue ? » temporary uploaded files not deleted

then it will upload to my server

Specifically where on the server does the file get uploaded?

mecano’s picture

He means files are not physicaly replaced when you replace a file through the form, even when using the same name for replacing the same file, the new file gets incrementaly renamed filling up the server space with no reason.

drewish’s picture

drewish’s picture

Status: Active » Closed (duplicate)

though temp files should be removed during the cron run.