title: Can a php shell be injected into an image? How would this work?
body: <p>I remember seeing an exploit for an image uploading function, which consisted of hiding malicious php code inside a tiff image.</p>
  
  <p>I'm making my own image uploading script, and I assume I'll have to protect myself from this possibility. Except, that I have no idea how it would work. Does anyone know how a php shell hidden inside an image would execute itself? Would it need to be loaded in a certain way?</p>
  
  <p>Thanks.</p>