On Sat, 17 Jan 2009 22:46:43 Julian Melville wrote: > > I need to establish what suffixes relate to web pages. > > You really can't tell from looking at a suffix what's on the other end. > In fact several of the vulnerabilities with IE have exploited exactly > this assumption to e.g. send executable content disguised as a GIF. > > A .php URL is as likely to return a GIF, download a file or a bit of > JSON markup as it is to be a web page. Are you able to look at returned > MIME types instead? > > Julian.
That will probably be part 2, to custom develop a replacement for the existing program I am using, which will do MIME type detection as well, however for now I just need a list of suffixes as the security issue you described does not exist in this application. Thanks, Michael --~--~---------~--~----~------------~-------~--~----~ NZ PHP Users Group: http://groups.google.com/group/nzphpug To post, send email to [email protected] To unsubscribe, send email to [email protected] -~----------~----~----~----~------~----~------~--~---
