Does any one have any code for black listing particular types of files or data within?
If so could you also tell me where it needs to be placed.
Does any one have any code for black listing particular types of files or data within?
If so could you also tell me where it needs to be placed.
If you have a UNIX server with the file(1) utility installed, you'll do better to run file on it, and determine whether to keep it or not based on the output.Code:if(preg_match('/(\.jpg|\.gif|\.exe|\.x86|\.bin|\.sh)$/i', $_FILES['userfile']['name'])) { die("Filetype not allowed."); }
Code:$op = `file ` . $_FILES['userfile']['tmp_name']; if(strstr($op, "executable")) { die("Executable files are not supported."); }
Twey | I understand English | 日本語が分かります | mi jimpe fi le jbobau | mi esperanton komprenas | je comprends français | entiendo español | tôi ít hiểu tiếng Việt | ich verstehe ein bisschen Deutsch | beware XHTML | common coding mistakes | tutorials | various stuff | argh PHP!
Thanks
Bookmarks