php

One PHP file of 57 bytes. For a web server, an uploaded PHP file is one of the most serious problems, because if it is saved in a public folder and run, an attacker gains control of the site. This file is a single PHP comment that does nothing. Use it to test that your upload refuses .php, and also .php5, .phtml and uppercase variants if your server runs them. Then confirm that files in the upload folder are never executed, whatever their extension. The safest setup blocks the type on upload and stops the folder from running scripts.