coderkun/questlab
1
0
Fork 0
Code Issues 15 Pull requests Projects Releases Wiki Activity

detect mimetypes on server-side instead of relying on mimetype reported by client (Issue #202)

Browse source
This commit is contained in:
coderkun 2014-05-03 16:32:26 +02:00
commit 3e37012ba0
3 changed files with 34 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
questtypes/submit/SubmitQuesttypeController.inc
View file

@ -56,15 +56,16 @@
// Check mimetype
$mimetypes = $this->Submit->getAllowedMimetypes($seminary['id']);
$answerMimetype = null;
$answer['mimetype'] = \hhu\z\Utils::getMimetype($answer['tmp_name']);
foreach($mimetypes as &$mimetype) {
if($mimetype['mimetype'] == $answer['type']) {
if($mimetype['mimetype'] == $answer['mimetype']) {
$answerMimetype = $mimetype;
break;
}
}
if(is_null($answerMimetype)) {
throw new \hhu\z\exceptions\SubmissionNotValidException(
new \hhu\z\exceptions\WrongFiletypeException($answer['type'])
new \hhu\z\exceptions\WrongFiletypeException($answer['mimetype'])
);
}