Welcome Guest, Not a member yet? Register   Sign In
why Upload checks Mime types for allowed file types?
#7

[eluser]eroy4u[/eluser]
[quote author="gtech" date="1213770172"]Just because a file is named .ppt does not mean it is a powerpoint presentation. for example if you named a Jpeg image.jpg to image.ppt the file will still be a jpeg. the extension just tells the operation system what application to open when viewing.. if you loaded the image.ppt in a art package the jpeg will still appear.[/quote]
thanks a lot, I understand.
so I guess the solution to restrict file types is to check
1. file extension
2. mime type match that extension
but CodeIgniter is not doing this way, it only checks the mime type, if I add "application/octet-stream" to "ppt" in mimes.php,
many file types of mime type "application/octet-stream" can be uploaded!
I think this is a big bug?


Messages In This Thread
why Upload checks Mime types for allowed file types? - by El Forum - 06-16-2008, 10:26 AM
why Upload checks Mime types for allowed file types? - by El Forum - 06-16-2008, 11:42 PM
why Upload checks Mime types for allowed file types? - by El Forum - 06-16-2008, 11:48 PM
why Upload checks Mime types for allowed file types? - by El Forum - 06-16-2008, 11:52 PM
why Upload checks Mime types for allowed file types? - by El Forum - 06-17-2008, 12:16 AM
why Upload checks Mime types for allowed file types? - by El Forum - 06-17-2008, 07:22 PM
why Upload checks Mime types for allowed file types? - by El Forum - 06-17-2008, 11:35 PM



Theme © iAndrew 2016 - Forum software by © MyBB