Closed GoogleCodeExporter closed 9 years ago
You're 1st point is totally right, a patch is attached :
if GD isn't there its pointless to use TimThumb
Moreover the if(!valid_src_mime_type($mime_type)) is (almost) never reached.
The file extension is not a good criterion to take into account.
About the second point, I think that it less costly to check the mime-type than
computing the md5sum. But I agree that is should not happen.
About the third : other are related to this subject.
Original comment by raphael....@gmail.com
on 1 Jul 2010 at 3:20
Attachments:
/thanks for the suggestions. I've implemented the changes. Hopefully this will
be just as robust as the old version :)
Original comment by BinaryMoon
on 25 Sep 2010 at 10:16
Original issue reported on code.google.com by
mirk...@gmail.com
on 14 May 2010 at 11:31