OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: James Fleming (jamesfleming94588yahoo.com)
Date: Wed Jul 03 2002 - 21:48:27 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi,

    Wonder if anyones done this or can help with some
    advice (epecially in Java if possible).

    I am building a system where the user can upload a
    file. I want to restrict the file types. I know
    extension checking is futile (especially if youe a Mac
    user) so is there a bullet-proof way I can check a
    file type from the byte-stream or similar? I read
    about the Apache mime module but it wasn't clear to me
    as if the browser selects the mime type, then the
    adversary could change it pretty easily.

    Aloha !

    __________________________________________________
    Do You Yahoo!?
    Sign up for SBC Yahoo! Dial - First Month Free
    http://sbc.yahoo.com