forum.vdsworld.com

[GeoTrail]

I'm working on a larger project, and in a part of the program I want to upload images to my server. I want to do this using ftp, so I will need to add the server name, username and password into variables in the program. Is this a bad idea? Is it easy to crack and find the password? Also, is there a way to check if the images selected are actually real images and not just checking the extenions?

[jules]

FTP is an inherently insecure protocol anyway, since passwords are sent in clear over the Internet. The chances are your program will be stored in a safe place.

Examine the first few bytes of image files: you'll find that they all have a signature that tells what type they are, although it won't tell you if the file as a whole is valid.

[GeoTrail]

Well, the idea is to publish the program so members on my forum can use it. That's why I need some ideas about this problem.

Been thinking about using a PHP script to handle the uploading and checking, that way it won't need a password to be sent using ftp. But for that to work and without displaying the users browser I would need the ability to use a SERVER or POST method.

[PGWARE]

[GeoTrail]

Thanks for your input PGWARE.
I'm not too excperienced with the ftp protocols since all I use it for is managing the server space. But it does sound like a bad idea when you put it that way.

I think I'm gonna write a seperate small dll program in another language that will do the uploading. Purebasic has alot of great libs that supports POST