[UPHPU] File upload validation
rusty.keele at yahoo.com
Wed Jan 23 14:15:39 MST 2008
Trevyn Meyer <trevyn at esourcehome.com> wrote: Have you ever written a file upload validation? What methods seem to
work for you? I have tried PHP mime type, but ran into problems where
the OS thinks its one things and php thinks its another. I have some
jepgs uploaded that recive no mime type. I have also tried the linux
file command and it works ok, but with no great success.
I have used the exif functions in php to make sure users upload a specific image file type:
$imagetype = (exif_imagetype($_FILES['upload']['tmp_name']));
if($imagetype > 0)
if (($imagetype != IMAGETYPE_GIF) &&
($imagetype != IMAGETYPE_JPEG) &&
($imagetype != IMAGETYPE_PNG))
return 'Error: Attachment must be a gif, jpg or png';
return 'Error: Uploaded file not an image';
PHP has to be compiled with the --enable-exif tag for this to work.
see http://us3.php.net/manual/en/function.exif-imagetype.php for more details
Looking for last minute shopping deals? Find them fast with Yahoo! Search.
More information about the UPHPU