Page 1 of 1

file uploading and mime check!

Posted: Tue Sep 21, 2010 7:04 am
by prografr
Hi,
why some people check file mime types in file uploading process when we can find file extensions from it's name? it there any security points? :?
i found that some hackers :twisted: upload their shell's in fake file format! can mime check bypass these fake files?

Re: file uploading and mime check!

Posted: Tue Sep 21, 2010 9:37 pm
by JakeJ
A MIME is a terrible thing to waste.

Re: file uploading and mime check!

Posted: Thu Sep 23, 2010 12:04 pm
by prografr
JakeJ wrote:A MIME is a terrible thing to waste.
:? realy?! thnx JakeJ .. :)