The filename solution might not be your best bet. They could've uploaded an
mp3 which is simply named metallica.mp3.jpg. A call to getimagesize would
allow you to verify if it is indeed a valid image file.

/* Chris Lambert, CTO - [EMAIL PROTECTED]
WhiteCrown Networks - More Than White Hats
Web Application Security - www.whitecrown.net
*/

----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, August 26, 2001 5:32 PM
Subject: [PHP] Re: Eregi for Image


| Jeff Oien <[EMAIL PROTECTED]> wrote:
| > I want to check if an uploaded file is an image. This isn't working.
| > Could anyone  help me out?
| >
| > if (!eregi("\\.gif$", $img1_name) ||
| > !eregi("\\.jpg$", $img1_name) ||
| > !eregi("\\.jpeg$", $img1_name)) {
| >        error message
| > }
|
| unless you expect the file to have three extensions at once, you
| probably mean && for each of the places you wrote ||.
|
| or you could do this:
|
|   if (!ereg("\\.(gif|jpe?g)$", $img1_name)) {
|     error message
|   }
|
| jim
|
| --
| PHP General Mailing List (http://www.php.net/)
| To unsubscribe, e-mail: [EMAIL PROTECTED]
| For additional commands, e-mail: [EMAIL PROTECTED]
| To contact the list administrators, e-mail: [EMAIL PROTECTED]
|
|
|


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to