Posted by John Nichel on 10/10/25 11:19

Jack Jackson wrote:
<snip>
>>> So my questions:
>>> 1. How do you validate Word and Excel files before upload?
>>
>>
>>
>> Before? JavaScript...if JavaScript can even do it (I haven't touched
>> the stuff in ages). After upload, you can check the mime type, but
>> that's not foolproof.
>>
>
> Okay, sorry I miswrote: after upload to the temp directory, BEFORE using
> move_uploaded_file(). Checking the mime type is the problem - if I can't
> trust the browsers am I really reliant on the file extension? Can't I
> peek in some manner into it as we do with getimagesize()?

If your version of php has been configured with it, you can use
mime_content_type()

http://us3.php.net/manual/en/function.mime-content-type.php

--
John C. Nichel
ÜberGeek
KegWorks.com
716.856.9675
john@kegworks.com

[Back to original message]