Re: Uploading and verifying word and excel files
| From: | Jack Jackson | Date: | Thu, 23 Jun 2005 15:02:33 +0000 |
| Subject: | Re: Uploading and verifying word and excel files | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-217490@lists.php.net to get a copy of this message | ||
John Nichel wrote:
Jack Jackson wrote: <snip>Will do.Also, it seems that directories must be blown wide open (777) to allow the script to copy the file over from /tmp. My ISP won't allow directories to be set to 777 under public_html/ -- but we need to access the files via web browser which is the whole point.It shouldn't have to be this way. The webserver should be configured to run as your virtual user, or belong to a group which has write permission to that directory, or.....I'm getting a bit off track with that. This is something you'll have to take up with your ISP.
Okay, sorry I miswrote: after upload to the temp directory, BEFORE using move_uploaded_file(). Checking the mime type is the problem - if I can't trust the browsers am I really reliant on the file extension? Can't I peek in some manner into it as we do with getimagesize()?So my questions: 1. How do you validate Word and Excel files before upload?Before? JavaScript...if JavaScript can even do it (I haven't touched the stuff in ages). After upload, you can check the mime type, but that's not foolproof.