Handling image uploads securely in PHP(codepunker.com)
codepunker.com
Handling image uploads securely in PHP
http://www.codepunker.com/blog/handling-image-uploads-securely-in-php
1 comments
You should also check the size of the image to make sure it's actually an image. I can quite easily get a php file into your system using your current way as you ONLY check for extension.
By size I mean dimensions.