I am trying to check multiple mime types for an uploaded file, but I am unsure of how to check to see if it is more then one mime type so far it only checks against one, so how do I make it check to see if it is one of several mime types?


Here is my code it currently only checks for mime type video/x-ms-asf, but I need it to check all of these mime types.
video/x-ms-asf
video/x-msvideo
video/x-flv
video/quicktime
video/mp4
video/mpeg
video/x-ms-wmv

how do I do this?

PHP Code:

<?php
//home/forbushj/www/vidtemp/
$target = "vidtemp/";
$target = $target . basename( $_FILES['uploaded']['name']) ;
$ok=1;

//This is our size condition
if ($uploaded_size > 350000)
{
echo "Your file is too large.<br>";
$ok=0;
}

//This is our limit file type condition
if (!($uploaded_type=="video/x-ms-asf")) {
echo "You may only upload movies.<br>";
$ok=0;
}

//Here we check that $ok was not set to 0 by an error
if ($ok==0)
{
Echo "Sorry your file was not uploaded";
}

//If everything is ok we try to upload it
else
{
if(move_uploaded_file($_FILES['uploaded']['tmp_name'], $target))
{
echo "The file ". basename( $_FILES['uploadedfile']['name']). " has been uploaded";
}
else
{
echo "Sorry, there was a problem uploading your file.";
}
}
?>

You need to edit:

PHP Code:

if (!($uploaded_type=="video/x-ms-asf")) {
echo "You may only upload movies.<br>";
$ok=0;
} 


Try:

PHP Code:

if($uploaded_type != "video/x-ms-asf" || $uploaded_type != "video/x-msvideo") 


Adding a new || $uploaded_type != "video/*" for each. || is OR and && is AND.
Just a warning, only IE 7+ analyzes the file contents to hand you this, all other browsers simply look at the extension. So if I uploaded an executable with the correct extension it'd fake it.

Same thing, but how do I avoid fake files?

PHP Code:

$allowed['video/x-ms-asf'] = 1;
...
$allowed['video/x-ms-wmv'] = 1;
...
if (isset($allowed[$mime_type])) {
   proceed();
} 


Considering "fake files": you cannot validate the file by mime-type, you will have to check it with `file` comman-line utility (should be pre-installed on most *nix servers) or try to identify it with some utility that should recorgnize the specified format (e.g. ffmpeg).

Just an extra about this, file says Firefox's key3.db is Berkeley DB, I tried opening it with Berkeley and it stated that it's not Berkeley.

mtishetsky - Thanks for your reply in this post. It just solved my problem!

This is practically the same as Mike's example, I just prefer this way

PHP Code:

$mime; // file's mime type
$allowed = array('video/x-ms-asf', 'video/x-msvideo', 'video/x-flv');
if (in_array($mime, $allowed)) {
   echo 'Eureka!';
} 


While on small arrays (up to tens items) using in_array() or isset($array[$key]) is mostly a question of religion, on large arrays (from hundreds items) isset() is significantly faster since it does not have to iterate through array.