Can I “echo” a .jpg image through php without processing it?

Question

Imagine the following:

Now, in image.php:

header(\'content-type:          


        

Answer 1

Sure, using readfile. Don't forget to restrict the allowed image names. Otherwise, you'd be creating a directory traversal vulnerability.

header('content-type: image/jpeg');
$img = preg_replace('/[^0-9a-z\._\-]/', '_', $_GET['image']);
readfile($img);