The PHP implementation must conform to our standards

[FredCK]

Check that the PHP integration is ok with our standards, as defined at Server Side Integration Status.

[fredck]

The following is a proposal from Nicolas Grekas to check if an image file is really an image:

if ( false === @getimagesize( $oFile['tmp_name'] ) )
	SendResults( '202' ) ;

[wwalc]

It's almost perfect solution, but unfortunately we should also take care about situation, where perfectly valid image file still contain HTML code inside.

It is described here: http://www.splitbrain.org/blog/2007-02/12-internet_explorer_facilitates_cross_site_scripting

and some comments can be found here:

http://sla.ckers.org/forum/read.php?13,7019

I checked few open source projects to see how they handle image uploads and it seems that Mediawiki has very good solution for it. I borrowed their code and adjusted it for FCKeditor. Let me know guys what you think of it.

[684] (BTW. I'll adjust it to CodingStyle rules, sorry for that)