Re: Re: how to detect type of image

From: Date: Sun, 22 Apr 2007 16:26:23 +0000
Subject: Re: Re: how to detect type of image
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-253492@lists.php.net to get a copy of this message
Jonathan wrote:
Alain Roger wrote:
Hi, In my web application, end user is able to load images (png, jpeg, gif,..) into database. I would like to know how can i detect automatically the type of image (pnd, jpeg,...) ? i do not want to check the extension because this is easily faked... just by renaming it. Does it exist a technique for that ? thanks a lot,
Is there anything wrong with just using $_FILES['upload_name']['type']?
$_FILES['upload_name']['type'] appears to believe the extension. Try it--upload a file with a misleading extension. This same question was asked yesterday and the advice was to use
    string *mime_content_type* ( string filename)
That doesn't seem to get fooled very easily, though I suppose you could fool it if you went to the effort of, say, setting up a fake image header, when what you are sending is a time bomb.
M. -- _____________________ Myron Turner http://www.room535.org http://www.bstatzero.org http://www.mturner.org/XML_PullParser/

« previous php.general (#253492) next »