how to check/verify file types?

[j.g.]

Hello List!

 

I'm working on some file uploading code, and need to check the file type and then verify that it's either ".doc, .txt, .pdf, or .xls" -- if it's not one of those, display an error and not upload it.  But, I'm not sure how to do this; I think I want to implement $_FILES[my_file_name]["type"] somehow, but I just don't know where to begin or how to implement it???

 

Would someone out there be able to help me get over this hump that I've been stuck on?

 

Here's my file upload code:

 

elseif (preg_match("/upload/i", $submit))  // $submit == "Save";
{

    if ($_FILES["glossary_file"]["tmp_name"] )
    {
       if ( move_uploaded_file($_FILES["glossary_file"]["tmp_name"], $uploadpath.$_FILES["glossary_file"]["name"]) )
       {
    $error_msg = "Successfully Uploaded Glossary File";

}
else
{
    $error_msg = "Error Uploading Glossary File";
        }
    }
    else
   {
$error_msg = "Error Uploading Glossary File";	   	
    }
}

 

Thanks in advance for your help and expertise!

-j.g.

[roopurt18]

Never, ever, under any circumstances use the type field provided in the $_FILES array; it is set by the browser and not PHP or the web server.  This means the value can be easily faked.

 

Refer to this:

http://www.php.net/manual/en/ref.fileinfo.php

[j.g.]

OK - that's why I'm here...I'm not sure how to do it and thought that that would be how, but I guess I was wrong.

 

Any suggestions?

 

Thanks much!

-j.g.

[roopurt18]

Refer to this:

http://www.php.net/manual/en/ref.fileinfo.php