Are there any security reservations involving PHP function getimagesize()?

Question

我将在OSCommerce电子购物车的修改中使用它 - 不允许用户上传，但SQL用于文件名。

Answer 1

It is possible to hit your memory limits quite quickly with huge or malformed images of certain types. Whether this is a problem for you depends on how you are using it. Also, keep in mind that if you use getimagesize() on a URL, you are doing an HTTP request.

Answer 2

AFAIK使用它没有安全风险......你没有得到用户的输入，它只返回你传递的图像的大小。