$conf, $runtime; function_exists('chdir') AND chdir(APP_PATH); $r = 'mysql' == $conf['cache']['type'] ? website_set('runtime', $runtime) : cache_set('runtime', $runtime); } function runtime_truncate() { global $conf; 'mysql' == $conf['cache']['type'] ? website_set('runtime', '') : cache_delete('runtime'); } register_shutdown_function('runtime_save'); ?>uploads - Where to store sensitive uploaded file?|Programmer puzzle solving

Programmer puzzle solving

    最新消息：Welcome to the puzzle paradise for programmers! Here, a well-designed puzzle awaits you. From code logic puzzles to algorithmic challenges, each level is closely centered on the programmer's expertise and skills. Whether you're a novice programmer or an experienced tech guru, you'll find your own challenges on this site. In the process of solving puzzles, you can not only exercise your thinking skills, but also deepen your understanding and application of programming knowledge. Come to start this puzzle journey full of wisdom and challenges, with many programmers to compete with each other and show your programming wisdom! Translated with DeepL.com (free version)
    你的位置： HOME>matter>uploads - Where to store sensitive uploaded file?

    uploads - Where to store sensitive uploaded file?

    matteradmin12PV0评论

    I'm developing a plugin. Where is the best place to store a user uploaded file that is sensitive in nature? It should not be web accessible. Given the encoding of the file, it's necessary that it be uploaded, as opposed to storing it in the database.

    I'm developing a plugin. Where is the best place to store a user uploaded file that is sensitive in nature? It should not be web accessible. Given the encoding of the file, it's necessary that it be uploaded, as opposed to storing it in the database.

    • uploads
    • security
    • filesystem
    Share Improve this question asked Mar 1, 2019 at 0:31 ScratchaScratcha 1152 silver badges7 bronze badges 2
    • What do you intend to do with the file? – Jacob Peattie Commented Mar 1, 2019 at 0:50
    • It's a tls certificate. It will be passed as part of the header when making curl requests. (--cacert [file]) – Scratcha Commented Mar 1, 2019 at 0:54
    Add a comment  | 

    1 Answer 1

    Reset to default 0

    Upload files at anywhere ( normally create your own folder inside wp-content/uploads folder ), you can create .htaccess file and index.html files inside the folder to restrict the files from direct access.

    Keep index.html blank and add deny from all text in .htaccess file.

    Articles related to this article

    Post a comment

    comment list (0)

    1. No comments so far