如何防止更改上传的图像类型JPG为JPEG

Question

This script automatically change uploaded image type JPG to JPEG

How to prevent? I do not want to change image type.

if (is_uploaded_file($_FILES['myfile']['tmp_name']) && ($_FILES["myfile"]["size"] <= 8192 * 1 * 8192)) {
   $enabled = array(
       IMAGETYPE_PNG,
       IMAGETYPE_JPEG
   );
   list($width, $height, $extension) = getimagesize($_FILES['myfile']['tmp_name']);
   if (in_array($extension, $enabled)) {
       $ext     = image_type_to_extension($extension, true);
       $newname = $username . $id . '-' . time() . $ext;
       $imglink = $upload_folder . '/' . $newname;
       if (@move_uploaded_file($_FILES['myfile']['tmp_name'], "$upload_folder/" . $newname))

       $result     = 1;

Answer 1

Extract the original extension from the file data not image_type_to_extension

replace this line

$ext     = image_type_to_extension($extension, true);

with this

$ext = "." . strtolower(pathinfo($_FILES['myfile']["name"],PATHINFO_EXTENSION));

EDIT: to allow JPG extension you have to do your own check after you have confirmed the image is a real image file with getimagesize().

$allowedExtensions = ['jpg','png','jpeg'];
if(in_array($ext, $allowedExtensions)){
    //it's an allowed extension 
}