Posted by Michael Fesser on 11/16/07 00:23
..oO(Mad Hatter)
>On Fri, 16 Nov 2007 00:17:42 +0100, Rik Wasmus wrote:
>>
>> What's the reason the mime-type is of importance to you?
>
>It's not. It's just that all the upload scripts that I've seen seem to use
>it to work out the file type. I think I'll stick to my original idea of
>checking the file extension of the uploaded file.
The extension is as unreliable as the submitted content type. Don't use
it for security purposes.
Micha
Navigation:
[Reply to this message]
|