Re: Uploading JPEG's - Security Issues?

On Thursday 16 May 2002 03:06, Miguel Cruz wrote: > On Wed, 15 May 2002, Andre Dubuc wrote: > > Actually, I figured out how to do it: a combination of checking: > > if ( $_REQUEST['pix']['type'] == "image/jpeg")} blah, blah, > > blah > > I'm pretty certain that the 'type' that appears here is just derived from > the file name, and therefore is not trustworthy. Someone please correct me > if I'm wrong (as if that's ever a problem...) If you're using linux/unix then you might want to look at the 'file' program. -- Jason Wong -> Gremlins Associates -> www.gremlins.com.hk Open Source Software Systems Integrators * Web Design & Hosting * Internet & Intranet Applications Development * /* It'll be just like Beggars' Canyon back home. -- Luke Skywalker */