Mime验证php文件上传无效

时间:2015-07-28 03:00:51

标签: php html mysql oop

我尝试在将文件上传到数据库之前验证文件的mime类型。但是,我没有从我的程序中获得任何输出。有人可以帮我这个吗?在此先感谢:)

表单句柄代码(handleUpload.php)

<?php
    if (isset($_POST['submit'])) {
        $Upload = new Upload();
        if (function_exists("check_doc_mime")) {
            //validate MIME type
            $validateMime = $Upload->check_doc_mime($_FILES['filename']['tmp_name']);
           if (!$Upload->check_doc_mime($validateMime)) {
                /* Not a MIME type we want on our site, stop here
                 * and return an error message, or just die(); */
                echo "Mime not what we want.";
            } else {
                echo "This is okay";
            }
        } 
    }
?>

函数和数据库操作代码(upload.php)

<?php
    // If it's going to need the database, then it's 
    // probably smart to require it before we start.
    require_once(LIB_PATH . DS . 'database.php');

    class Upload extends DatabaseObject {

        protected static $table_name = "resume";
        protected static $db_fields = array('resume_id', 'individual_id', 'resume_title', 'file_type', 'file_size', 'upload_date', 'status', 'resume_data');
        public $resume_id;
        public $individual_id;
        public $resume_title;
        public $file_type;
        public $file_size;
        public $upload_date;
        public $status;
        public $resume_data; 
        protected $destination; //so cannot be changed outside of class

        function check_doc_mime($tmp_name) {
          // MIME types: http://filext.com/faq/office_mime_types.php
          $finfo = finfo_open(FILEINFO_MIME_TYPE);
          $mtype = finfo_file($finfo, $tmp_name);
          if($mtype == ("application/vnd.openxmlformats-officedocument.wordprocessingml.document") || 
            $mtype == ("application/vnd.ms-excel") ||
            $mtype == ("application/vnd.openxmlformats-officedocument.spreadsheetml.sheet") || 
            $mtype == ("application/vnd.ms-powerpoint") ||
            $mtype == ("application/vnd.openxmlformats-officedocument.presentationml.presentation") || 
            $mtype == ("application/pdf")) {
            return TRUE;
          }
          else {
            return FALSE;
          }
          finfo_close($finfo);
        }



        public function uploadResume($fileName, $tmpName, $fileSize, $fileType, $date){

            global $database;

            $fp = fopen($tmpName, 'r');
            $content = fread($fp, filesize($tmpName));
            $content = addslashes($content);
            fclose($fp);

            if(!get_magic_quotes_gpc())
            {
            $fileName = addslashes($fileName);
            }
             $sql = "INSERT INTO resume (resume_title, file_size, file_type, resume_data, status, individual_id) ".
                "VALUES ('$title', '$fileSize', '$fileType', '$content', '1', '$id')";
             $database->query($sql);
        }



    }

    $Upload = new Upload();
    $upload =& $Upload;
?>

1 个答案:

答案 0 :(得分:2)

原来是因为我没有正确地写出我的if语句。它应该是if (!$validateMime) {而不是if (!$Upload->check_doc_mime($validateMime)) {