Re: filtering uploaded files
| From: | Richard Lynch | Date: | Wed, 30 Mar 2005 03:59:22 +0000 |
| Subject: | Re: filtering uploaded files | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-211839@lists.php.net to get a copy of this message | ||
On Tue, March 29, 2005 2:04 pm, A. S. Milnes said:
> On Tue, 2005-03-29 at 22:23, Richard Lynch wrote:
>> > //The mime type of the file, if the browser provided this information.
>> > $userfile_type=$_FILES['userfile']['type'];
>>
>> Nooooooooooooooo!
>
> Hmm - some very senior people disagree with you!
Please reference their publications, if possible.
It's just plain BAD security to trust this value for any real-world usage.
And it's made meaningless by the browsers not standardizing what they send
anyway.
--
Like Music?
http://l-i-e.com/artists.htm