From db666481ad11d986f4a84334514b261336168ace Mon Sep 17 00:00:00 2001 From: "Eric Johansson (neku)" Date: Fri, 15 May 2015 09:54:07 +0200 Subject: Update README.md --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 341e1b7..5091b84 100644 --- a/README.md +++ b/README.md @@ -39,6 +39,8 @@ that PHP and Nginx provide ample protection in this department. There is, however, client-side configuration for max size, the `data-max-size` attribute on the file input in `pages/upload_form.swig`. +Make sure to disable PHP from being executed on the file download domain/directory (e.g a.site.com), otherwise a attacker can upload a malicious .php file and execute it on your server. + ## Todo * Clean up Moe code, a lot.. -- cgit v1.2.3