繁体   English   中英

Mime验证php文件上传无效

[英]Mime validation for php file upload not working

我正在尝试在将文件上传到数据库之前验证文件的mime类型。 但是,我没有从我的程序中获得任何输出。 有人可以帮我这个吗? 提前致谢 :)

表单句柄代码(handleUpload.php)

<?php
    if (isset($_POST['submit'])) {
        $Upload = new Upload();
        if (function_exists("check_doc_mime")) {
            //validate MIME type
            $validateMime = $Upload->check_doc_mime($_FILES['filename']['tmp_name']);
           if (!$Upload->check_doc_mime($validateMime)) {
                /* Not a MIME type we want on our site, stop here
                 * and return an error message, or just die(); */
                echo "Mime not what we want.";
            } else {
                echo "This is okay";
            }
        } 
    }
?>

函数和数据库操作代码(upload.php)

<?php
    // If it's going to need the database, then it's 
    // probably smart to require it before we start.
    require_once(LIB_PATH . DS . 'database.php');

    class Upload extends DatabaseObject {

        protected static $table_name = "resume";
        protected static $db_fields = array('resume_id', 'individual_id', 'resume_title', 'file_type', 'file_size', 'upload_date', 'status', 'resume_data');
        public $resume_id;
        public $individual_id;
        public $resume_title;
        public $file_type;
        public $file_size;
        public $upload_date;
        public $status;
        public $resume_data; 
        protected $destination; //so cannot be changed outside of class

        function check_doc_mime($tmp_name) {
          // MIME types: http://filext.com/faq/office_mime_types.php
          $finfo = finfo_open(FILEINFO_MIME_TYPE);
          $mtype = finfo_file($finfo, $tmp_name);
          if($mtype == ("application/vnd.openxmlformats-officedocument.wordprocessingml.document") || 
            $mtype == ("application/vnd.ms-excel") ||
            $mtype == ("application/vnd.openxmlformats-officedocument.spreadsheetml.sheet") || 
            $mtype == ("application/vnd.ms-powerpoint") ||
            $mtype == ("application/vnd.openxmlformats-officedocument.presentationml.presentation") || 
            $mtype == ("application/pdf")) {
            return TRUE;
          }
          else {
            return FALSE;
          }
          finfo_close($finfo);
        }



        public function uploadResume($fileName, $tmpName, $fileSize, $fileType, $date){

            global $database;

            $fp = fopen($tmpName, 'r');
            $content = fread($fp, filesize($tmpName));
            $content = addslashes($content);
            fclose($fp);

            if(!get_magic_quotes_gpc())
            {
            $fileName = addslashes($fileName);
            }
             $sql = "INSERT INTO resume (resume_title, file_size, file_type, resume_data, status, individual_id) ".
                "VALUES ('$title', '$fileSize', '$fileType', '$content', '1', '$id')";
             $database->query($sql);
        }



    }

    $Upload = new Upload();
    $upload =& $Upload;
?>

结果是因为我没有正确地写出我的if语句。 应该是if (!$validateMime) { not if (!$Upload->check_doc_mime($validateMime)) {

暂无
暂无

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM