如何限制用户在php中上传文件？

Question

I have searched on this site and google. I found a lots of suggestion about php upload restriction for user upload. Such as, check extension, getimagesize()

or read file data and check if it is legal image or not etc etc.

But my thinking is: if i create a .htaccess to execute only img file and rename the uploaded file then is it not enough for security ?

What's your opinion ?

Answer 1

使用html 5时，您可以使用'accept'属性将上传内容限制为仅图像，音频或视频或mime_type。