Re: [Phpwebsite-developers] Security Question

[Matthew M. <ma...@tu...>]

Jim Wilson said:
> 1) Check mime types against actual file content instead of scanning
> for code.

The browser tells php what mime-type it is and this can be duped. If
anyone knows how to read the file header on the server instead of taking
the browser's word for it, please tell me. That should work.

-- 
Matthew McNaney
Electronic Student Services
Appalachian State University
http://phpwebsite.appstate.edu