Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : scanning file uploads with mod_security

[barleduc]

I would like to use mod_security to block file uploads containing php or perl code.

This section of the documentation suggests it is possible to do this using a 'SecUploadApproveScript':
http://www.modsecurity.org/documenta....9.html#N1078E

Has anyone tried this?

[ninja_byte]

This thing looks awesome. I think I'll have to try it out right now. I am interested in the exit statuses that mod security is expecting though. For example, if I don't like the file, can I delete or chmod it before the php script can write/move it?