HTTP Anti-Virus Proxy http://havp.hege.li/forum/ |
|
SCANIMAGE http://havp.hege.li/forum/viewtopic.php?f=3&t=203 |
Page 1 of 1 |
Author: | vittorio [ 23 Jan 2007 22:46 ] |
Post subject: | SCANIMAGE |
540 //Scan JPG? GIF? PNG? if ( Params::GetConfigBool("SCANIMAGES") == false && ToServer.ContentImage() && ( MatchBegin( BodyTemp, "\255\216\255\224", 4 ) <---- (1) || MatchBegin( BodyTemp, "GIF8", 4 ) || MatchBegin( BodyTemp, "\137PNG", 4 ) ) ) { ScannerOff = true; } Are also "ff d8 ff e0" the value for JPG image? |
Author: | hege [ 24 Jan 2007 00:02 ] |
Post subject: | |
I don't understand your question? That's the most common signature. I guess you could strip the last byte away, to match some more. |
Author: | vittorio [ 24 Jan 2007 11:47 ] |
Post subject: | |
Sorry !! A little conversion error |
Page 1 of 1 | All times are UTC + 2 hours [ DST ] |
Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |