Remove exif data from users profile images

Question

I got a request from a security team about uploaded images.

They asked whether it is possible to clean out uploaded images from personal information.

When a user uploads an image, the uploaded image’s EXIF Geo location Data does not get stripped. As a result, anyone can get sensitive information of users like their Geo-location, their Device information like Device Name, Version, Software & Software version used, etc.

Is there any way to process uploaded images and exclude such information from it?

p.s. you can use https://exifdata.com/ to read meta data of image.

Comments

Does the security team have PHP compiled with the GD library?

Answer 1

Q2A seems to be using imagecreatefromstring() for converting uploaded image data back to actual images. To my knowledge that function does not preserve EXIF data, and Q2A also doesn't seem to restore EXIF information from the uploaded data.

Comments

thanks, you are right, they uploaded image as a link (not as a image). That is I believe different case so all is good.
Thank you very much!

---

Useful information , thank you all .✋