[UPHPU] File upload validation

[Jonathan Duncan]

On 23 Jan 2008, at 13:57, Trevyn Meyer wrote:

> Have you ever written a file upload validation?  What methods seem  
> to work for you?  I have tried PHP mime type, but ran into problems  
> where the OS thinks its one things and php thinks its another.  I  
> have some jepgs uploaded that recive no mime type.  I have also  
> tried the linux file command and it works ok, but with no great  
> success.
>
> My main application uses latex, and latex only accpets system  
> recognized pngs and jpegs.  Im thinking about using image magic to  
> press everything down to a jpeg, so I can then process non MIME  
> typed images, and gifs and such.
>
> Have any of you written a better upload validator?  Also, let me  
> know if any of you would like some work.  Illpost on the job board.
> I want to combine
> http://uber-uploader.sourceforge.net/
> with iamge magic for
> mightyauthors.com [Deisgner is meeting with them.. so dont judge by  
> the cover please :)]
>
> Mighty Authors is a Latex template system, that allows people to  
> fill in the gaps and write books and projects using latex2pdf  
> templates
>

In case you have not read this, it is a good read about securing file  
uploads:

http://www.scanit.be/uploads/php-file-upload.pdf