CodeIgniter upload class question.

[eluser]Dentafrice[/eluser]
Yes.. I have done that.

The problem is, that the entire Upload Class, from my understanding, ONLY checks the information provided by the browser/file.

Meaning if the header: content-type is image/png, that's all that matters.. you can easily have an image/png "headered" file, and have an extension ".php", and it uploads.

I know that if it's stored out of sight, then it's not as big of a problem, but when you want to limit allowed_types to gif, jpg, png.. then that's what you want..

You don't want .php, .anything files stored..

Hopefully I'm getting the point across