php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #55182 finfo_file() doesn't detect right mime-type
Submitted: 2011-07-11 16:33 UTC Modified: 2016-12-04 04:22 UTC
Votes:9
Avg. Score:4.3 ± 0.8
Reproduced:9 of 9 (100.0%)
Same Version:2 (22.2%)
Same OS:2 (22.2%)
From: dominique at ramaekers-stassart dot be Assigned:
Status: No Feedback Package: Unknown/Other Function
PHP Version: 5.3SVN-2011-07-11 (SVN) OS: Ubuntu 10.04
Private report: No CVE-ID: None
View Developer Edit
 [2011-07-11 16:33 UTC] dominique at ramaekers-stassart dot be 
Description:
------------
The finfo_file command detects openxml documents (xlsb, xlsx,...) as application/zip files.

Can this be fixed?

There are a lot of people who have to hack the mediawiki code to allow these files for upload. With these hacks they lose a part of there security: the checking of the finfo_file-mime-type against the file extension itself...


Test script:
---------------
php > $finfo = finfo_open(FILEINFO_MIME_TYPE);
php > echo finfo_file($finfo, '/mnt/Transfert/test.xlsb');
application/zip

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2012-08-14 19:58 UTC] tom at tombartling dot com 
This also fails to detect the correct mime-type for PHP files. If the file starts with <?php, it returns text/x-php as the mime-type. If the file starts with <!DOCTYPE html><html>... and the PHP code is anywhere else in the file, it returns text/html as the mime-type.

It fails to detect a CSV file correctly. 

This is a problem for the CodeIgniter framework, since it's file upload class uses this function.

I'm on Red Hat Enterprise Linux Server release 5.8 (Tikanga).
 [2012-08-15 15:04 UTC] narf at bofh dot bg 
AFAIK, this is depends on the OS and external packages. MIME type detection isn't a problem just for PHP and I doubt there's much that can be done about it.
 [2016-11-24 16:02 UTC] ab@php.net
-Status: Open +Status: Feedback
 [2016-11-24 16:02 UTC] ab@php.net 
Thanks for the report. The concrete file is needed in this case.

Thanks.
 [2016-12-04 04:22 UTC] php-bugs at lists dot php dot net 
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Re-Opened". Thank you.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Sun Dec 22 05:01:30 2024 UTC