detect mimetypes on server-side instead of relying on mimetype reported by client (Issue #202)

This commit is contained in:
coderkun 2014-05-03 16:32:26 +02:00
commit 3e37012ba0
3 changed files with 34 additions and 4 deletions

View file

@ -153,14 +153,15 @@
// Check mimetype
$mediaMimetype = null;
$file['mimetype'] = \hhu\z\Utils::getMimetype($file['tmp_name']);
foreach($mimetypes as &$mimetype) {
if($mimetype['mimetype'] == $file['type']) {
if($mimetype['mimetype'] == $file['mimetype']) {
$mediaMimetype = $mimetype;
break;
}
}
if(is_null($mediaMimetype)) {
$validation = $this->Validation->addValidationResult($validation, 'media', 'mimetype', $file['type']);
$validation = $this->Validation->addValidationResult($validation, 'media', 'mimetype', $file['mimetype']);
}
elseif($file['size'] > $mediaMimetype['size']) {
$validation = $this->Validation->addValidationResult($validation, 'media', 'size', $mediaMimetype['size']);