如何保护上传文件？

Question

i want to ask about uploading files (images) to Laravel storage (local).

//validation rules for image - image|mimes:jpeg,png|max:2048
$img = $request->file('image');
$img->storeAs('somepath', 'filename');

Is is safely? I mean what if image will contains some EXIF keys with injection code in it? Or smth else.

Answer 1

您可以使用imagick重新保存文件createFromFile然后saveToFile