HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

SCANIMAGE
http://havp.hege.li/forum/viewtopic.php?f=3&t=203
Page 1 of 1

Author:  vittorio [ 23 Jan 2007 22:46 ]
Post subject:  SCANIMAGE

540 //Scan JPG? GIF? PNG?
if ( Params::GetConfigBool("SCANIMAGES") == false
&& ToServer.ContentImage()
&& ( MatchBegin( BodyTemp, "\255\216\255\224", 4 ) <---- (1)
|| MatchBegin( BodyTemp, "GIF8", 4 )
|| MatchBegin( BodyTemp, "\137PNG", 4 )
)
)
{
ScannerOff = true;
}

Are also "ff d8 ff e0" the value for JPG image?

Author:  hege [ 24 Jan 2007 00:02 ]
Post subject: 

I don't understand your question? That's the most common signature. I guess you could strip the last byte away, to match some more.

Author:  vittorio [ 24 Jan 2007 11:47 ]
Post subject: 

Sorry !! A little conversion error :D

Page 1 of 1 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/