On Sat, 2010-09-18 at 02:46 -0700, Michael Shadle wrote:

> There is a fileinfo module for php (and it's packaged in 5.3)
> 
> http://www.php.net/manual/en/intro.fileinfo.phphttp://www.php.net/manual/en/intro.fileinfo.php
> 
> However after trying to use "file" in a system call back in the day its great 
> with graphics and some other stuff, but a large number of the video files 
> came out with just a generic binary type. The site needed both pictures and 
> videos to be validated; I had to relax the restriction because most of the 
> video content couldn't be identified.
> 
> I would say transcode it (if its videos) so its normalized and consistent 
> with the rest of the site, and ffmpeg etc. will let you know if its not a 
> valid type your server can support. YMMV with fileinfo or system("file") 
> which I believe should give you the same results. Depends on what content you 
> are handling!
> 
> On Sep 18, 2010, at 2:32 AM, Ashley Sheridan <a...@ashleysheridan.co.uk> 
> wrote:
> 
> > On Sat, 2010-09-18 at 11:21 +0200, Peter Lind wrote:
> > 
> >> On 17 September 2010 23:25, Jim Lucas <li...@cmsws.com> wrote:
> >>> Catherine Madsen wrote:
> >>>> Hi!
> >>>> 
> >>>> I have created a form following the PHP manual to upload files and need
> >>>> to restrict the upload to only PDF.  How do I check the file type
> >>>> ($_FILES['userfile']['type']?) and where: on the form page or on the
> >>>> validation page?  I want to be able to tell the users that their file
> >>>> doesn't have the right format.  Thank you very much for your help!
> >>>> 
> >> 
> >> You need to use something like http://www.fpdf.org/ to try and
> >> actually open the uploaded file - anyone can fake an extension.
> >> 
> >> Regards
> >> Peter
> >> 
> >> -- 
> >> <hype>
> >> WWW: http://plphp.dk / http://plind.dk
> >> LinkedIn: http://www.linkedin.com/in/plind
> >> BeWelcome/Couchsurfing: Fake51
> >> Twitter: http://twitter.com/kafe15
> >> </hype>
> >> 
> > 
> > 
> > An exec() call to the 'file' command (assuming you're on a Linux server)
> > should give you back the correct file type as well. I just tested mine
> > with file-5.03 on a mis-named file and it correctly detected it. That's
> > not to say a carefully crafted file couldn't trick it, but it might be
> > good as a general checker where it would be a lot of hassle trying to
> > check every single file type by opening it up.
> > 
> > Thanks,
> > Ash
> > http://www.ashleysheridan.co.uk
> > 
> > 
> 


Yeah, video has always been a bit of an issue with file. Mplayer has a
command line option to return specifi bits of information about a video
clip though, such as resolutions, frame rate, length, codec and wrapper,
etc.

Thanks,
Ash
http://www.ashleysheridan.co.uk


Reply via email to