Re: Include fileinfo in core

Kevin Waterson wrote: > This one time, at band camp, Antony Dovgal <antony@zend.com> wrote: > >> Also, to repeat myself here, there is also no way to use filepro database, hwapi, msession, >> cpdf, dio, fam, ingres, mnogosearch, yp API, Ovrimos, PayFlow Pro and a bunch of other >> functions >> without using PECL. > > I appreciate your point about not having everything available to core. The extensions you > mention above are very specific to a task, where-as validating a file mimetype is quite a > generic procedure. To this end I would like to see more discussion on the topic. Its very > clear that you are not for it, but lets hear from others? my opinion count for jack s*** around here but the way I see it if I have a function fopen() as standard then I 'should' have a standard mechanism to figure out what kind of file something is. in practice I control all the servers I work on so doing 'pecl install fileinfo' is not a big deal - but the majority of users don't have that privilege. having fileinfo included as standard will hopefully encourage lots of projects (that are often infamous for security flaws?) to do a little more than check a file's extension when dealing with uploads? > > > Kind regards > Kevin >