Posted by Moritz Naumann on Jun 19
Either you or the developer of this software or both of you are missing
the point here: in terms of server side security it does not matter
whether or not PHP code is stripped off an image file by the time it is
converted. In fact, you can always legitimately have comments and other
meta data in image and other media files which are often stored as
unmodified plain text and this could also include PHP code.
What does matter is that this…
Source: Re: Php gif upload thumbnail creation remote exploit
