|
|
Posted by Richard Lynch on 03/30/05 06:59
On Tue, March 29, 2005 2:04 pm, A. S. Milnes said:
> On Tue, 2005-03-29 at 22:23, Richard Lynch wrote:
>> > //The mime type of the file, if the browser provided this information.
>> > $userfile_type=$_FILES['userfile']['type'];
>>
>> Nooooooooooooooo!
>
> Hmm - some very senior people disagree with you!
Please reference their publications, if possible.
It's just plain BAD security to trust this value for any real-world usage.
And it's made meaningless by the browsers not standardizing what they send
anyway.
--
Like Music?
http://l-i-e.com/artists.htm
Navigation:
[Reply to this message]
|