Validation of file formats of images and other binary.

This commit is contained in:
Hector Cortez
2011-01-25 19:53:57 +00:00
parent 3c582110ff
commit a1ded1d93c

View File

@@ -1,4 +1,5 @@
<?
$action = isset($POST['action'])? $POST['action']: isset($_GET['action'])? $_GET['action']: '';
switch($action){
@@ -15,14 +16,18 @@ switch($action){
break;
case 'getTemplateFile':
$aExtensions = array ( "exe", "com", "dll", "ocx", "fon", "ttf", "doc", "xls", "mdb", "rtf",
$aExtensions = array ( "exe", "com", "dll", "ocx", "fon", "ttf", "doc", "xls", "mdb", "rtf", "bin",
"jpeg", "jpg", "jif", "jfif", "gif", "tif", "tiff", "png", "bmp", "pdf",
"aac", "mp3", "mp3pro", "vorbis", "realaudio", "vqf", "wma",
"aiff", "flac", "wav", "midi", "mka", "ogg", "jpeg", "ilbm",
"tar", "zip", "rar", "arj", "gzip", "bzip2", "afio", "kgb",
"asf", "avi", "mov", "iff", "ogg", "ogm", "mkv", "3gp" );
"tar", "zip", "rar", "arj", "gzip", "bzip2", "afio", "kgb", "gz",
"asf", "avi", "mov", "iff", "ogg", "ogm", "mkv", "3gp",
);
$sFileName = strtolower($_SESSION['outpudocs_tmpFile']);
$sExtension = substr($sFileName, strpos($sFileName,'.') + 1, strlen($sFileName));
$strRev = strrev($sFileName);
$searchPos = strpos($strRev, '.');
$pos = (strlen($sFileName) - 1) - $searchPos;
$sExtension = substr($sFileName, $pos+1, strlen($sFileName));
if(! in_array($sExtension, $aExtensions))
echo $content = file_get_contents($_SESSION['outpudocs_tmpFile']);
break;