Re: How reliable is mime type in $_FILES superglobal.

"NC" <nc@iname.com> wrote in message
news:1138657877.599655.215680@g47g2000cwa.googlegroups.com...
> splodge wrote:
>>
>> I am working on a portal, part of which allows users to upload files.
>> Part of the array within $_FILES superglobal gives the mime type for the
>> file. Is this 100% reliable / accurate? If the mime type says the file
>> type is jpeg is it always right?
>
> It depends on your definition of "right"... If I understand correctly,
> MIME type is determined based on the file's extension.

Nope - PHP uses the MIME Magic library to determine the mime type of a file
based on the position of key bytes within the file:

http://uk2.php.net/mime_magic

So you could call an .exe .txt, and it would be picked up as an executable.

> Cheers,
> NC
>
Received on Tue Feb 7 21:08:13 2006