note 53584 added to function.mime-content-type

Re: sunfra at firenze dot net, 29-Apr-2005 04:31 > if you arern't allowed to use mime_content_type, you can use this > function --snip-- This is a very bad idea IMHO since a nefarious user can now upload evil_virus.exe.txt and possibly trick a user into downloading/executing it. Or exploit other problems in your code to actually run the code on your server! As someone else mentioned, if you don't have the mime_content_type function available, if you're on *nix you can make a system call to the file utility. Since I dont' code on windoze I'm not sure what the options are, maybe someone else could enlighten us. ---- Manual Page -- http://www.php.net/manual/en/function.mime-content-type.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+53584 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+53584&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+53584&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+53584&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+53584&report=yes&reason=useless Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+53584&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+53584&report=yes Search -- http://master.php.net/manage/user-notes.php