doulao2128 2013-12-03 19:23
浏览 48
已采纳

PHP中的文件上传:验证文件是否为gpx

I am currently working on a project where the users can upload images and GPX files. No problem in validating the images but I simply can't find a secure way to make sure that the gpx files are not some malicious file instead. Any hints are very much appreciated! Thanks in advance!

Edit: Can anyone please point out why this code is not working? By not working I mean that it does not reject PDF files.

$xml = new XMLReader();
if (!$xml->xml($_FILES["gps"]["tmp_name"], NULL, LIBXML_DTDVALID)) {
    echo '<script>alert("Not valid!");</script>';           
    exit();
}
  • 写回答

1条回答 默认 最新

  • dqu94359 2013-12-05 21:16
    关注
    $xmlcontents = XMLReader::open($_FILES["gps"]["tmp_name"]);
    
    $xmlcontents->setParserProperty(XMLReader::VALIDATE, true);
    
    if($xmlcontents->isValid() and ($xml->xml($_FILES["gps"]["tmp_name"], NULL, LIBXML_DTDVALID))) {
    }
    else {
        echo 'Not a valid GPS file!")';            
        exit();
    }
    

    note here you check the file validity as xml , and it's extention try this

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 mmocr的训练错误,结果全为0
  • ¥15 python的qt5界面
  • ¥15 无线电能传输系统MATLAB仿真问题
  • ¥50 如何用脚本实现输入法的热键设置
  • ¥20 我想使用一些网络协议或者部分协议也行,主要想实现类似于traceroute的一定步长内的路由拓扑功能
  • ¥30 深度学习,前后端连接
  • ¥15 孟德尔随机化结果不一致
  • ¥15 apm2.8飞控罗盘bad health,加速度计校准失败
  • ¥15 求解O-S方程的特征值问题给出边界层布拉休斯平行流的中性曲线
  • ¥15 谁有desed数据集呀