Monkuar Posted August 12, 2012 Share Posted August 12, 2012 Let's say users can create their own avatar with different items... I have to so it will check against each item that was used on the HTML 5 canvas serverside. So if user trys to use item with the id of 20 and uses it to make his avatar, it will result in an error. The problem is, I need to check the items that I have already for them to chose from, and check to make sure the .png image code (data:image/png;base64) is the correct one. Reason why, is because I don't want people making a new data:image/png;base64 code from a .png file and using tamper data. Anyone to secure and loop through, check the data:image/png;base64's data to make sure it's correct? I think I can pull each item's png data:image/png;base64 with javascript, but how the hell do I check it? Do I need to make a new table with all the png data:image/png;base64 info in there and just use that to check it or what? Wouldn't the string be way to long to use "==" operator? it's like a 10kb png file, so it's very long. Quote Link to comment https://forums.phpfreaks.com/topic/266979-how-to-secure-dataimagepngbase64-serverside/ Share on other sites More sharing options...
xyph Posted August 12, 2012 Share Posted August 12, 2012 Binary comparisons aren't bad. Checking in JavaScript isn't a good idea. It can be bypassed or manipulated because it's executing on the client's machine. Perhaps storing a checksum (see hash) of the base64 data would be a good way to verify instead of comparing them directly. Quote Link to comment https://forums.phpfreaks.com/topic/266979-how-to-secure-dataimagepngbase64-serverside/#findComment-1368785 Share on other sites More sharing options...
Monkuar Posted August 12, 2012 Author Share Posted August 12, 2012 Binary comparisons aren't bad. Checking in JavaScript isn't a good idea. It can be bypassed or manipulated because it's executing on the client's machine. Perhaps storing a checksum (see hash) of the base64 data would be a good way to verify instead of comparing them directly. i dont check in javascript, it all needs to be serverside. the id's are passed by javascript, but that's the only way, same for the base64 data, again that's the only way for this certain project i am trying this right now: if ($_POST['data'] == "iVBORw0KGgoAAAANSUhEUgAAAFUAAABtCAYAAADQ3C2aAAAgAElEQVR4nO2dd2BT5ff%2Fr%2FpxoDIK3W3apE2b1STNapK22U3StE3SNk2b7j3ooJS2dEAhZa8ChVI2CIggUEUQEFFBBREUEWUpONgKypLdJO%2FfH379%2FPj40Y%2BoTOH1d55z3uf03vvce57zPCWIRzziEY94xCMe8YhHPOIRtwW7kvjX7AYpe9uMNNF6u6GXnSAev9eaHmQeW2FXPv%2FJdJNw20TDykPzbHs3jjfN6eyvGLR%2BZGLwvRb3QLK4TvfcO6MM44%2FMTT56ZkEmzsyx4a1WAypUVDSZBJ8saNbz77XGB47NdqX37lbdoQuT4nFkciL2Dtdi93ADJqXykRRORny43yZ7nvKZe63zgeLNSp7vrgbZEcxPwU8vZuDoVBN2NRsx0sxHmYYLA5d0YWJ1LOde63yg2FYX6fnpUMVneDEN2FkLHBqDn96ox%2Bdtmegs1MMoIJ9vH6AT3GudDxT2xPA%2BmwZFbT%2FXHgd8WAucng7smYhziyswv8KIVBHp3SoD9el7rfOBIl%2FG0s80069cbovHV3NT8M3KcuybVYopOSrkqMNhEZD22m0833ut84HBThCPD44Lr29VB%2BNSRxLer9Kiw0DHygolYhhe4AZ4Qs%2FyP1uq53HvtdYHijFWkWKhhXf6hw4LXNub4Xy%2FBmfeqUWxjoVUmQD9Dbw9j2b%2Fv0CVmqr7pEp6Gm%2BUAzvqcGJFGcr0HJhl3Ou2GGHBvdb3QFKjZ%2FVdkc3fcG6GFZfmZWKKmY3oUE8ouAEH7rW2B5b1VeJe2xvUXTuLONhUJIU9VoAocl%2BY2b4na7X09HutjyAIgrDb7Y9b45K01YWl75hUsaZ7reePWN%2BkYV5oN%2B07Ws7H0nQuWsx8FIgCMELLwHyr4EpXUWTn5iql5J6KjI1SmVrrBx59ae7US8aYmDqCIO6797yJ2ZzntraZVN%2FPT7H%2FMDl%2Bh6vd7LrRqsb%2B6gi8VSDB2iwBNmTz8GGeAN8P1eGHyYnfHJ%2BcsuyoPabgk4pIaVeJwOeuCp46umXrxq4F6FrccT05Rr%2BKE8ih3FUBv8O5ZXnkMzNTSo9Oie%2F8%2FuXM7T9tKP7esdQGzEsG5tpwY2Yyzg%2FX4MRABU40x%2BDHcQm4MtkILM4ENg%2BAc0Mxrs81X7o8yXDy9Lj4L78eGbd2Y53aeFfEv%2F%2FOa1u%2FOfQRXpg5xaUUSM7IhLIagUDw5F1x%2Fts8vn12cpHrvdJvHO%2BUXMXewcCpVrgONAHvD4TrvSo4tg%2FCjbfKcWN%2BKq5NMMKxMAvOV4vheq8Krv1D4PqyBa69DcB7FcCKLGC%2BDZiWjO%2FHms%2BuqkuovOMRLJ3fufWbr3ZjzarFiOIKXRwa91uNTGO7445%2Fh3m12mznruqfXHvq4PpmBJynx8L543jg2Cg4Pm%2BAY1ctXO9Wwrm2CK5V2eh%2BKR3ONyuAnfVwHRwKx5d2uHYPgXPPELh2NsCxrj9cL%2BbBOS0VF0bG4tOh8SenZMsZdzSIaRNGbz18cA%2FeWr8acqEQYcGh3bII0QfxOnXkHXX8G8ys04XdeKfykGvHADh2DIZzRy2cR8fC9dNUuE6NgWtfM7CtCo5NxXBsKoFjbT6cbxTBtXUA8GkjXF%2BPgPPQSLjerQO6SuFakgdHpxWOGRm4Mi0L3w43Y%2B9gBRYXKlZYWayn7lggE0fbt355YC%2B2vfs24tRysENCECUQXNYpFK8qoqJUYrG41x1zfhOzSwRP7hif0IZ3q%2BHcUgPHEiucXXlwfTsazu5ZcP0wAc5ddXBtKkH32jx0bymDc20eXGvyfr5yD7TA9e0YOPcMB1ZXwjnFiusjYtE9Jh43Jlvw04xMnJ%2BehS%2BGqLE8S3xxlJWbdseCGVRZ%2Ber6NWscBz%2F%2FHP3z8xEWTIWUx4NZp0dmsuVqSrxpt1mnXxWn0qzSRcvWyoXiRUJ2eJyVIJ64nTrsVv%2B%2BR8abDmJlMfDGQGBeMpwr8%2BHaPwzOqzOAGzOBr1qBt8rgXJmD7tV5cC7PgGtj2c%2B%2FOTkRrr2twIYauObn4%2BRQPfZWSXF6hAHXpqQAnelwzczC4WEGvJjOxVhr2Krbqf8%2FUMtkESX5Rcs%2F2v4h3nh9LYxaLXh0BjSRUbDExSMzKRnWBCOSY%2BNgMcTDIFcfkXAFVbd7MltRQJVem2x23Wiz4sdpWdg3WI1Tk5KB9wbBcWQkXNc64To1Hq71xXAsssHxUgZcC1Pg2DYAzmNj4do7HFg3AJibje9GJGBjgRQdRhZmJTDxTqEIF4ZrcXmEAZ%2FWxmBRtgj2eOau0cmMO%2Faq9biPu4%2BwdkDN9tPHT%2BKj7VuRm2JBNI%2BPmKgoaKRRUImlkHDCIRdGQBspOxIRxr3dSX3sWAO3CtNS8G2TDl25ERiiomJroQjX2y1wbSwGPh0CbKuBa24SHHNT4HwpG64p8cArhcBbNcDKUlyanIpPyqPxqo2PKbEMNEbTUCbwx4IkBn4cokb3xAQcHhKLl4vlaDEwzjZpAhJuYwz%2FxRMsGk09dezYjy%2F9eBq7Pngf%2BWmpELM5UIkl0EiioBJHIk6uRqI27kiMTHFbk2q3E48fHxs31dWZhs8Gx2CBlYdqORVdFjaOVshweVIiuueko3uKGTeGquCcZ4NzSQ5%2BalLgXKsW58eZcawlHluKZZhlYGKiloFhChoqxMHICvfHQmMYzjTJgUWZuD4rEzsa4jAqMQxViqDW2xXD7%2FFkVHi4doJ9%2BEfffn0Yez75GEPqamDUKJGg0iDdmIyC1AykGxMvisLYL%2Ffr0SOCuE3r7Sus1ieuz8lddb09BYftiViZI0GtgowXTGzsLhbhQEkkzrbEo3tcEhzjE%2BCamQLXrHRcthtwvEWHz%2Bo1WFcgRYeJg9FqGobIQlATHYo8MRkJLC%2B06Wk4VisFFubgcqcN2wepMT5FgMFxrC670ffZ2xHD71IiEDyZl5WlbW9r23f6u%2B9w5vRpTJs4HimxBqTGmVCanYtCWyZkgoizAR4e0%2Fr26EG6HX5XWK1PXJubufnyBDP2DonHioJo1KhCMSGWji%2BrFThcFYVrk1LQPSkJzhlpcLUn48ZkE25MTcGpkUbsrdfig5pYzEniYIyWjmE6FookQbDyAqAM8cRgZTC%2BrJXDNSsdV6dbsadBj%2FlZ0RiZyPl8kpXFvB0x%2FE%2BUSuUzNqvVNGZk6%2B6vvzqMsz%2F8gMVz5qA8rwDD6wfDXt%2BABLXOxaBQPyR5eupvh8%2FNduJf52dYd3Z3ZmFPSyKWl2pQHROG%2FAiSY2%2Bl8saJOjku2mNxxa7GpalmYJoVjglxuDbNgi%2FrlNhdKcfbJTLMSmBgemI4WmNZyBMGwsLyR2Sw%2B43i6KC9%2B6tk11zz8%2BFaVIyToy1YW6bCOAv77EgrS307YrgVegh5PNNIu33nieNHceH8OWx5YwNemN6BsUNakKA1gBXCcIQGUrYGensbCIL4199x9kGNtMe5Odav8WI5vpmUj6UlMahQMGHi%2BB5fky95%2Bcd62YVLjXJcsWtwfW4mnO3J6B6jh6szHUeGaLG9SIT1mTwsTGZjckIYGlWhyOD5IZHuj6igfqeaUsMTPxsoO%2BSYkw%2BsrcXVuYXY2RCP9mT2tak2zt2rzPn6%2Bj4bIRAk1lVVf7xj21ZcuXQRe3buQMeECUiONyGcwQGLSrsa7Ed6zbtXv4i%2F4%2BvdgXzG1bb4q1fabfhiTCY6UsXIlwTBwPL9YnmBNOdqq%2FY4xhrg6rDAsao%2FumemoHu8AZiXi4vtqdhXK8eWQhGWZ%2FAx2cRGvZqONJ4%2FNCFeiGX6fGIvlPbdWCoaeWliGvBWA5xd1Tg4MgULMwSYbmPX3K6c3RICgeDJwszMqKnjxr976IsvcPXyT9i5dTMaB9UgUigFI5iG0MCgc0E%2BPrP83N1D%2F6qffRPiZjmmmHFqaAzWF4oxMpaBPGEAEvkBHy8silaea9EfdoyJA%2BamwbWsAI5OK5wTEoCONFxtT8XXzTHYVCDCS5lCtCWGY4CchkS2P4R%2BvVAey15ozyM%2FMzs91P1IY8wJvJAP5%2FL%2B%2BGa0BV35YszOF86fVnWXl7UFvr7PJsjlcSOamjZ%2F%2Bsku1w%2BnT2B%2BZwdUUhmYwTRwaEyEBlK%2B9%2FXwGOfm5hbwZ%2B3vm2GiXn%2Bz6kfXO7W4sbgE2yrkaNEykB9JR3YUdenCPPIzewdGdZ1rUAFTzHDNS4OjwwLH%2BAQ4JppxbnQC9tep8Vo2H%2FNTeBiupSGVR0JEkCeigjwujyqITvrF1%2Fsl%2FDUYo8dleyz2lsuwMomBOemcLxYN0vzlC%2BLv8LjFYmFNnjSp6%2FChL3H0228w1j4cclEEhKwwhNMZCPDxPerh5tbk6enp9WcMH%2BsqHIxd9Q5sHgzHsgpsqTOgNJqGJCH1WpYsxEIQBLG%2BVNS6r4DvvG7XAYtz4JyfAedEM1wzM3F2nBkflUmwJJmN4Uo68vgkKKieCPPtjSx50NvT8mUev%2Fgap%2FNvvD5Mi0vDtTgyJQWn2lPwZqXYNT0%2F6s7VAf4XLBbrqXiNRjaiecibn%2B3aiW%2B%2F2o8JI4ZBI42EiMVBGDUEgb6%2Bh309PKr8%2FPz63ardU5vrNmP7IDiWFuCrMSmYkh6NBA4FVknQKyWCn98hXymQFH%2BQEX7jYrMGWJIDzLbhxgQjnDNsuDgpGVuLRJiqDUGpgAIDzQ8Sijd4%2Fr0xyMRuu9nX69mi5Csz0uHY0YzuAyOB92txcIwFo028SXe0avVHmOPM7LGtI17Z88kunDjyNTonTYQ1NgEqkRQ8GgOhAeSDISRyPo1G6%2FlHttaMUkouflB3CqtLcHZSGrrKNMiRspDAC7pQEcc0%2F%2FK716rl8g8KxFfONyqBWalwtCXi%2FPAYnBsZh7OjjNhZFol2PRUVERSYWH6QUdwhDHB3NadFFN3s79Q4C6t7ZdF1fDgUzo9agLeqcXpWEcZbhB%2FZeKR719lilUp7JMfHxw9rHLzto%2B2b8d2xQ5g7rR3JujioRFJEcQUQ0sKOcYJCm1hksvf%2FsvVmZ0rDjW0Db7gW52N3UwJazSLo2GTkasLmETd9rb1SFun5Ybn01JlqKS4OU%2BNiiw7fDVbjSL0GB6rl2JzLx0wjA9WRFKTxAhFDdYcq1OvMyMxI3c3%2BTtqNz56fZd2B9QPR%2FU4DsKoIN%2BblYVp25EWzwJ99h1J26yQlxTOaG%2BqXvPnG%2ButfHdqP%2BbOmIdVkhCJCAgk3HDw64xSbGjqITqf%2F3qPgsR1Lcl91ru6Po6NTsLREiSxJCBJFwZ83pUvpN%2F9wmoH6dFcG%2F6tDJQIcrRLgXLMKxxs0OFinxtYiEVYkMTEtlo5GeRAKRAGQUTzAC%2FQ8V2Pix95sZ4WVeOJ4m6EFa8vh3FANLM0F5udjcakK8hCS%2FI4l61axWq1PxcXptFWV%2Fbds3Ljaeeb0V%2Bh6eRGyrVYoxBKoJJHQRStOayIVo%2BUiEYkgiMduHj93MMf%2Fm5VFn52basO7A3RoMQmh5QR0V5n%2Bu8ukMZZOtrHcT7fp6PiwRIjL44z4dlA0DtWpsXdwDBYnMdEUSUY23x8qqjv83Z7D8z2edWbJGEW%2FtrVvlD7CsaK427WqDK7ZWcDsXHT118AsYd2dRcFbQRMdHTqgvHDGurVdZ0%2Bd%2BBqru5Yh25aBeG0c8m2ZyEtNhzpKtYdF51i8vDjPEcTPNYblQ7TWrzrSLx0ebsK6UhWypSGwiEPW2ZXK%2F%2Fo6G50qGBFD7ecUkj2QHE5GZ2YktlVG4b3yKMzIiEK6kAxRQD8wffqC5tkLJLceeO7pp6DjBs8u%2BVU17f3GaLczMzN3YkkhnNNscLWnY3WZDENsyjLiV3%2F4e4parQ6sriqb%2Fsb6lT%2Bd%2BW4%2FVi6fi5L8PNgH12HxjClorKyEKlLeTQtirKcH0RPSEpLGFiYaz25qTsKX9iRMt4pgFgScq0ng%2FteXWZ2O89yABM6BTAEJMZR%2BkAZ6wMALRrIoCBlRNBi4ZHC93cD2dQPPpw94fn3B9usHkntvSOj%2Bnxfq%2BdSb7W1WEv86NEY%2FGotzgNmZcExPx%2FoyGabmKBus1tu7mvG3Men11PLc3Okvzp33w6qXlqOiqBylWflY1NGBiXY79DIduDS%2BU8QVXSnNKXT2z8p0LSyNxfYaHao1XNjkITN%2Fy26jgabur6FdrNSxYONTkBwegCxxMMK8eiPctw%2FSRUHQUD2hDXFHbJgvDOGB0IcHQckNAcPP3ZGlZv1XK9BHzQqDc34GsDAbjs4MbCxXoD1b13TfJZUgCILFYnlHiyLHSQXSH%2FgsPsrzivD5xx9g2%2BaNKEjPg5AlgUKsQlvrOCyaMRcjim2YZpMiXRL0RZGS6v9bNhtj6S9ZBIHOQUYuKmOYKNdyMcTMR56GhWx5CGriw5GrYCI3OhRlGjbyYziIEwUjiuGLII%2Be0LP9X6oy%2FOfi5fuDokPPd6Qew5IcXOtMxev95RiaIB7z60fF%2FcSzPDorXcWL2FOQmIhXFkzGstnjkWY0QRwuBZPKhEUjh72yCGXZ2YiLYCCS6V9F%2FMZCYqPSg1pvYB3OiaZhVJYUQ1PFyJYzUGcWoSlFjOaUCLRYpchTMFCoYaE1XYZSHRvWqFAow0gI8XFDqFefn8qNItHNdj%2Bokfb9ZoJxNZbk4uLkFKwuk6M2Nryjinoft7bT3N175hoSBrdWFh9bMHEIWmuKYTMmwaQzu9K1UXjfbsJ3C3KxrKkANmPCVR8v91kEQXgTv5oopmRJ%2Bk%2FJiboyPlOGqXkqjMtSIENKhSUyFNlqJoq0LBSpmDCJglGfLMLUfAWGpMqRGRkMi4QOLS8EYUG%2BMAmCW4hfrVLsbJA3uubYcGpEPJYXyjBQQ5%2BdpyTfnw3DXs8QlFSdtOnFtpZ96%2BZPPzemduBxnTTqUklGJiY11%2BHVUbnYZDc6Xi9THts%2FNqmm2GKt5jNY73u5uxuJm%2BqyVQbq00UK6tpBBi5mFSowJVeOJks08jXhiGH5Qc8NQFw4CWZhMOLDA9GaKcOkLBkaTXzUJwlRbZLAFs1CBDMIPIr7%2FpoErt%2FNOl8r5cdeXpbbffXFHOwYloyxSewV92tSnyH1fNYkCg3sUguZ65X8sCwpn08No4Y2p8XHnW0bmIvvOvKxpzn28rhkwdD5aRHcxUV8hpjK8Q8nh%2FchbrpSJ2YJlc1m7okZxVq8XK3Ha42JGJMZjRwVC1E0L4iDPRFN84aMSUIsj4RhqUK05yuxfJAJiwfGY3i6HPkxbCjCyfBx64l8JbuSuOlqfb1aanVurXdhQwXwYjk%2BGZt2dG6m%2BDef6%2FeaJwiCeJYgiOcJgniK%2BP9JeiyaS8tPj6JdW1NlxIXJNufUAt1BqrfHoj7PPBNI%2FMYC4oIKZVFnkezGirp4dNUa8N7IVLw53IppJbGI5VNA9e4Fpn8%2FMPzcEMfxx2sNJnw5oxTbR2fh1cFJGJcjx6BEEfK1XIhoQRCS3bdI%2FYkev9jfN8VUgNcrcKUjHXgxDzdWVaKrXDVrbAbb7W4k6raQpyQ%2FE88hbchWCLCgLAGTBuRekPM4V8MCvKaFeT7nRfzqebq7PWfirin5eL3RiA0tyVhZo8fKRjPm1SaiSBeOMD83ULzd4d2rB3KVTHw%2BvQAHOnLx8qA4zChQYHp%2FHZpSpSjVcZGmFiAmnPxFprjvv98Cjr6QW%2FHJpIzrb5Qrvz7%2FYm43NtRg36QszMyMGHzXk%2FN3KJIHUmJZfltjaAFOjUTybZHV4ozhM8En9dtO9%2B6jIH6%2BugmCIIi37Jb2RRV6vFQZi41DzZhfpoY9VYpB5ggUavmQ0knwdeuFMP9%2BV1pt4qtrm02YV6rE9HwFFpTFYE65DkNs0bBKqTBGs5EmZ36RKab%2BktTHlhWLIjfXxMSsrVSXHRwWd%2Fn67FysGWzC6DRh%2Fb3Jzt8gU9y3V6KA2hQRHDChsX%2FhwfmjaxzlSbKzcRGM%2BnA6mUwQxGMlAsGTI9MiFo9Pl2LLiHTsnmjD%2BiYz2jIU6K%2FjIT4iFHyqLzx79YBJELBygo1%2Foi0rCvNK1eiqNWHj0BSsqjdicrEe2UoWxPQAqFikT3%2BpzxL%2Fd1d8YTe6X5ud9frFKenON2rMKNcwrlSbOLR7lpy%2FiwdBPE8P9KtNNSg%2BLs9M%2BLi%2B1JKerBer7Hbi8QlWpfeUXNnmVbXx2N9egIPtOdjSmoI5%2FXWoT5LCJAkBneyJvr2fc5UqKMYpORGrZxQrsa7JjPXNqdjUkoxXG83oLI9DrUkEJS8E0lCPnQJf4t%2BNE1sHR%2FU8OiVt0eERZnRVxKJEJ0GKgLz6fn0D%2BF3WVxmeXmFlPWW1Ek%2FY88jPKAniX7169eobRqNx2OwANyrV24MgiMfmlssZ8%2Fur96xvScL%2B6bnYNd6GVTUGtGXL0JQciWxlGKgBviD79P60XBdM6sjmiNc0mM69VheHReUaLB%2Bgx7JBJsyqTEBTihSmaC4kIf0%2BvDmpswWCJ1dmSl7oMApQGMlwxLFJ7xbJA%2B%2BL1vw7wotVGuYLlbrP3hxqwZ62bGwabsHMYgVGpEpQYxQiRcYENdAXKpbPbMP%2FfQUtLlVPWz4wDnNKFJhTrMGiqjhML9GhwSKBWc6HONTrP5JKEARRr6JFpQlDliUJqI03T2L%2FSKbli5kzSpSfvTXMht0Tc%2FH28BTMKlVgmE2EwUliyJh%2B8Ozb05WhoJf8e0xOdMyrzUmOeSXReKFSi4UD9JhSrEVzWiTSdBIIqe4f%2Bv4qqQ8VdfHBYQMNnL3t%2BWpsGWHB5uFmLK7QYJg1Av31AijCQkHq1%2BuEgeP17%2F1Sb7Zmpc8vVjteqNDg5YE6LKrSYWKeGjVGEUwyHvgUt4c7qSUyX36WNOhQc5IE77Za8MmEVHQN0mNUehTSZEzQ%2FD3BCey7QUwl%2Fn3L2uOYA2bly12ravTY2GTGaw1mTMrVIFvBgoBGQohnjw99iYc4qSOSWVFDLYKTnaVabB%2Bbii%2Fbc7BleAraCtRIimLAp9%2FzMEQEjbt5TLXcp3Rppd71tt2CbaNTsa4pCe3FOhTrwyFmUUB1f%2FbhTurojPDwSTnRX8wq0eKtFgs%2BnpCL9Y1JGJ%2BtQLwkDAEebhdydKyUm8fML4hSrWtKdm1osWDT8GS80pCIKYVaDDQKYYjigh%2FU7%2BG%2B%2FevjaLElitBLZYpgtCQKMTVHhVaLCEXyUEQyKGAEen1sivrPdfqXao3uC0sUJ9usERifLsEwqwglsTxkRTEQI6RD8Buz%2F0PF6MyoMQlsf%2BSISag3CTEmVYJCRTBM3ACwSP0gZfh2%2FHqM1Uo8McHKfHtkPBtNJi6q9WEwCUOhDPKAgOwBsmfvh%2Ff2X1Gu9B6RJt6kZwegQsnEpPQoTMyQIFfFBD%2FIBwFevS8ZeN45vzH08SIZ5YUKFQPjMqVoNAthFdOhY%2FghxKcfvHs98%2FAmtSNfwB9s5p%2BySUPQbBRgak40JmVHo0DNRjjVHzQ%2Ft8%2BVot%2FufBlmEVSPt0ViQakKYzMkKFCGQc3wA8XLHQzvng9vUmcUSdKak7jIU4RgXKYCCypi0GyRQskhw6N3b2d0sMeo3xs7zipg12lZN2YUqzGrTINaoxAJ%2FCBQvd2hDQ%2F8%2BKaCykPFY0sqohva86RIFgQiSxaKtlw5%2Bht4CKP4I9inzxGb3Pd3N2%2FYjb7PliiD35mYp8LiAQbUWcSIE1BA9fGAmkP%2BbHaJ8eFLql1J%2FGtBhWDc5IwIpItDYRKRMdAYgXQNCyH%2Bnk5duHfn%2FxxPEI%2BPtfEKJudGobNYhRQpHWH%2BHvBx64VYHvnE0v7xD05V%2F3Yxu0Tw5JwS4fgGIw9Z0UzkqJgojuEjkkWCv9vzN2KYff%2FwNJ%2F2PHFITSzz5NgcJQoULChofgj194UkxKt7VLZWeDfiuK%2BwW1lPTc%2BXTC7X86Bjk6Flk6DhUhDi5w6yR8%2BrFXq2%2BY9s1Ok4z5VqGEuKlDTkKsKgDw%2BGiEEByasXMuS0cX80%2Fh9Hnc7rueEpwvlVBh4MYf7gUbzBofohyKcvQj17Xmkr0atuxc4AHbPKwvNFHC8YPIo3GKR%2B8PPqDUmIx9HR6eI%2F1T7%2FwJMY3qdPVlTwigodF6ZwH7BIbmBSvBDg1RdBns9fGZEpi7oVO5Uqqj5FRHFpw8jgB3iAQ%2FZCiL8HKD79nAPjuS13Oo77iv7RAW55cnqXTc5CloIBAdkddH93hJK8Eezd88oAc%2FgtnZZRIgvkZ0kopw18KriB7uBQPED3d0NooBd0PNL%2BsRnRD8%2BENdhE61kXF74kLZqBbAUTSmYAeFQ%2FcEPJoPv0vmjled%2FSPtJcUV9WTiTpcJyQClGID7iBfSGgeEDMCACD7HPVGuFfeKdjuW%2Bokfr3aDLzOwrUXCSLQxAnCIGSQwUrOBBsUu%2FDVql%2Fjz%2B2QhAVakpgeQx9e2oUHXKaH%2FThFGjDg8Cl%2BoDs54FwUq8X7nAo9w9WgngiPzJwZH%2B9EMmSUKi5ZMhYZIQG%2BCLMu%2BeWW7VTKPXvWxMX1lWu5yJZEow0GQOxfCp4FF8wyX4QBfX7iMUi7t0Wn7tNmSpkQKIoFDYFG3KmL7hkTwT6eiKC0qftj0f%2FjJUgniiSUTur44QoN%2FBgkzGgZlMgZZDAZ1AQHeq7z8rz9vhjS%2F8QWhO52SniEMSLaTAIghAW4AGKrzt0XL8%2FdTRHfxW9OVvGRG2iFOlRoVCxA6ATUBHNpkDHCTxQo%2F7PLsB%2FNBUK%2FySrJBgmCR2acDIi6CRwAt2%2FV7I8%2FueerF8zUBWUnCwIvpEcEYpYth8SJaFIltKgFzFhCKccHJLMC7xTMdx31GuD4tRML8iZfjBJaIjmhkAe7L5OSSb%2BVOdIjYrKMrAD98VyKCjUMFCi5yFTxkIkkwxRkPfDldQKOUVuEVFuCILcwSF7gdL3WWTKOUP%2B7DlYVoJ4IkVIXqQPI6HWFIFCDRcaDgUhvn0ho%2Ft8MdR4fxwUeVcokfiLjWzfizKGH5gkT9Dde7jqk6SKv2KrSk1KN%2FBJV5P4VNiiwyBn%2BSOGR0UMh%2FRlWiT14flfK9kRQUIN3e8HqvtzoAd4QsbwvTjBwgL7WCAAAAPASURBVAj5K7ZKZIE%2BWcrQnTVmCYrUbGTKmUgQhUIcGvCVnunNut3a71uW1sYL6k3C08Huz4NH8YaJH3hhpIn2l9sbS5TU6QPihciUBkMX5gemnxvoXn2Om1iet1RH%2BEewpUUjOjAr7fzaei3aLGIURAU77Mnsv7wZt0RKSjRySedkwe4QB7pBTPVEZKjvSSXVXXkbZd%2FfLM7niF2bKhxYmotl2dFIi6SgLpZfSvzFfaNWEdlbHuJ1QBbqgyRBMCzCYIhCvE76uz%2F%2Fl57TDxybGmJ671%2BW2YXttTgx1oiJSXykRDNRr2VMVSr%2F%2BjFNWlq%2FNabwAKRFMiAL9YS%2F23OnAvs9f9fOo7pnrLCynjqyJHOC69NBLteKPLw3QIkaAws2KQNF8uC3a26xmPJblMgptQVKxjVuoAcC3J4Fw6fPd9owX90fj3zA2dWqrHCtLXZidT4utlnwcm408uQMJIuCkRMVfMpuDHX%2Fq7anW9ns8uig78L9PcH07wsxze9ElYYpu5367zv2DJabro5JuIoOC9BuxbEhsehIi0A8lwIt3RdmTuDXeb%2FTQHEr2FnEU2%2FXyD%2Bbni9HoZqBEjX7WFMCW3o7Y7ivOD7Lprk6M%2Fl7dCYCU1PwbaMam8oVaNYxEOHrBkmg%2B5aYMH8l8TcPOPhhevKHWFOG7mU52Nkcf26IIjjpj0c9gHy3OFvseL30ONYVAKsLcWq0GXNSRRio4iKN43dGFtSnTeDb8y%2Ff9r8wW0A8%2Bd28tM%2BxrhToyseR8WbXEANr%2FO2I4b7iyDg969Ii2%2BfO96qA3Y24vjQXc7KjYRGGOLR031eMbG%2FD7fK1eaCEfGlF7nG8XQqsLcXlhZlYkC3%2B0Cr173u7fNwXYFFVqfOVQif2N%2BDyG9WYnSNBAi%2Fo7Zgwn2Qx9fbuFDlgV0c6Fqb%2FgLf7w%2FV%2BFfBqAfYNib9SKgz8Z61VHarX6i62J53fPy4eDdqQT3mkPgUi8p%2Brmd4qx0ZmhJweHn%2BmuysX2DkQWF2AC5NS0JEs3BlL70O%2BEz7vCVVU4ulaoXdKIqlfntKvxx3dEm63E49P0AWnHRhtPImPBsD1ehEujbHglUypK4Pv33GrC4qP%2BA1GaEJtN9b3B9bk4fIII9anCZAfQXEUR1Oy77W2B5YqKvXpz2akvop3y4GFWdhSKIaVS4KO5XN3D6b9p7GkRko9uab04NGF2ehM4aA8mvp1pjTo3p%2Fz96Azv0lrWmI3nZtTIN03xsB%2BOKpVdxq7nfXU%2BIGaxPY0Tti91vKIRzziEY%2F43%2Fw%2F4r7uZO3OfpkAAAAASUVORK5CYII%3D"){ echo "hey"; exit; }else{ echo "nope.."; exit; } which does not work at all... and i roughly have no idea i will be trying your hash method, any more details about the hash? So pretty much create a hash code to be checked with for each image instead of trying to check it like I did above? Quote Link to comment https://forums.phpfreaks.com/topic/266979-how-to-secure-dataimagepngbase64-serverside/#findComment-1368790 Share on other sites More sharing options...
Monkuar Posted August 12, 2012 Author Share Posted August 12, 2012 $fname = "./img/nrpg/swords/sword2.png"; $hash = hash_file( 'crc32', $fname ); echo "crc32 = $hash\n"; looks liek this shows: b4e0499e i can just put a row in the items_Table called "crc32" and check if that exists to this, if not error that user out for trying to be nawty! OK awesome, this is alot shorter code! now i just need to find a javascript function to use this same algorithm Thanks xyph solved!! Quote Link to comment https://forums.phpfreaks.com/topic/266979-how-to-secure-dataimagepngbase64-serverside/#findComment-1368792 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.