|
.htaccess to serve image files only
Is there a way using .htaccess to make sure the files in that directory are only served using a safe content type?
We have an upload script that checks the filesize and the extension of files (make sure they are images), but I understand that a malicious .gif can be uploaded.
Is it possible and would be helpful to have a .htaccess that says files in this directory must only .gif/.jpg/.bmp/ etc...?
Thanks.
|