php fileinfo files upload validation not working

Question

I am trying to upload files and check if the uploading files are really pdf files, so I resort to the fileinfo functions in php.

The problem is that the code is not validating anything. It will allow all sorts of files to be uploaded including viruses. Currently, I am checking the file extension name but it's not secured and that's why am resorting to fileinfo. Can someone tell me what is wrong with the code? I am running php version 5.3.5

if (function_exists('finfo_open')) {
    $mime = finfo_open(FILEINFO_MIME_TYPE);
    $mime_type = finfo_file($mime, $_FILES['myfile']['tmp_name']);
    if ($mime_type == "application/pdf") {
        echo "file is pdf";
    } else {
        echo "file is not pdf";
        finfo_close($mime);
        exit();
    }
}

If no message is being displayed when this code is executed, then it would appear that if (function_exists('finfo_open')) is returning false. What happens if you remove that? — gmfm
– gmfm, Commented Sep 7, 2018 at 21:58

Community · Accepted Answer · 2020-06-20 09:12:55Z

1

The issue has to do with enabling fileinfo.dll in php.ini files.

I went to php.ini and uncomment/remove the semicolon before ;extension=php_fileinfo.dll

so that it will look like below extension=php_fileinfo.dll

I then save and restart apche and behold, its working now. Thanks

edited Jun 20, 2020 at 9:12

CommunityBot

11 silver badge

answered Sep 8, 2018 at 13:23

chinazaike

5177 silver badges21 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

php fileinfo files upload validation not working

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related