Re: [symfony-users] Re: File upload and mime type detection issues
Yes. You can even open the zip without problems. But anyway that's not the correct mime type. And it's not the only case it detects the wrong mime type. That's why I, sadly, have to use the original extension and mime type until I find a better and consistent solution. I know it's not the best way to handle uploads but I have no choice for now. If anyone finds a "fix" for this issue or a better way to handle it, please let me know. @matteosister: method "guessExtension", in the case of some .docx will return ".zip", at least in my case (Ubuntu + Apache 2). And I had problems with "getExtension" method last time I tried, after updating Symfony on friday. It always returns null. I don't know if this was fixed in the last couple of days. I'm not at work today so tomorrow I'll check that again. I saw someone reporting this issue this weekend. 2011/6/17 Louis Huppenbauer > btw - zip for docx is not that far off. > docx-files are essentially zipped xml-files ;) > > sincerely > louis > > 2011/6/17 Gustavo Adrian : > > Thanks for the tip! Yes, this topic is a real headache. I had this type > of > > issue on centos too (although I don't remember with which filetypes). For > > now I'm handling this problem in the insecure way.. using the mime and > > extension sent by the browser, and marking the file as "insecure" in that > > case. It's the only way I can make it work. None of the three mime type > > guessers works. I have problems with several file types, including the > one > > you mention. > > BTW, after updating yesterday Symfony 2 I saw that File classes that > handle > > the uploaded files have changed. I was using "UploadedFile::getExtension" > to > > get the extension, but now it returns an empty string. It uses pathinfo > to > > get the extension. I didn't have a deep look at it so I'm not sure why > this > > happens. I mention it only if it's relevant to someone. In my case I'm > just > > getting the extension from the original name for now (because the > > "guessExtension" obviusly is not working if the mime type is wrong. For a > > .docx it's giving me a '.zip' extension). > > > > I'd like to keep this message alive in case anyone has more comments like > > yours about this which are helpful in this topic. > > > > Thanks! > > 2011/6/17 matteosister > >> > >> yes same problem here. > >> I'm on ubuntu too. > >> I' think it's a problem bound to proprietary file types. > >> Take a look at /etc/mime.types for mime supported by your system. > >> > >> For me the problem comes with .doc documents. It says that it is a > >> application/vnd.ms-office instead of ms-word > >> > >> This is why microsoft sucks. > >> > >> On 17 Giu, 15:22, Gustavo Adrian wrote: > >> > Is someone having this issue? > >> > > >> > 2011/6/16 Gustavo Adrian > >> > > >> > > >> > > >> > > >> > > >> > > >> > > >> > > Hi all, > >> > > >> > > I wanted to ask you guys if you've found a "definitive" way to > handle > >> > > mime > >> > > type detection issues. I recently implemented file upload handling > in > >> > > my app > >> > > with Symfony 2 and I'm having problems detecting, for example, .docx > >> > > files. > >> > > When I upload a .docx, it detects a mime type of "application/zip". > I > >> > > have > >> > > this issue with other file types too (like .csv). > >> > > >> > > I know this is not a Symfony 2 specific problem, I had this problem > >> > > before, > >> > > but I'd like to know what do you think about this. I'm using right > >> > > now: > >> > > >> > > Apache 2.2.16 > >> > > PHP 5.3.3 > >> > > Ubuntu 11 > >> > > >> > > and I have FileInfo v1.0.5-dev > >> > > >> > > How do you handle this situations? > >> > > >> > > Thanks. > >> > >> -- > >> If you want to report a vulnerability issue on symfony, please send it > to > >> security at symfony-project.com > >> > >> You received this message because you are subscribed to the Google > >> Groups "symfony users" group. > >> To post to this group, send email to symfony-users@googlegroups.com > >> To unsubscribe from this group, send email to > >> symfony-users+unsubscr...@googlegroups.com > >> For more options, visit this group at > >> http://groups.google.com/group/symfony-users?hl=en > > > > -- > > If you want to report a vulnerability issue on symfony, please send it to > > security at symfony-project.com > > > > You received this message because you are subscribed to the Google > > Groups "symfony users" group. > > To post to this group, send email to symfony-users@googlegroups.com > > To unsubscribe from this group, send email to > > symfony-users+unsubscr...@googlegroups.com > > For more options, visit this group at > > http://groups.google.com/group/symfony-users?hl=en > > > > -- > If you want to report a vulnerability issue on symfony, please send it to > security at symfony-project.com > > You received this message because you are subscribed to the Google > Groups "symfony users" group. > To post to this group, send email to symfony-users@googlegroups.com > To unsubscr
Re: [symfony-users] Re: File upload and mime type detection issues
btw - zip for docx is not that far off. docx-files are essentially zipped xml-files ;) sincerely louis 2011/6/17 Gustavo Adrian : > Thanks for the tip! Yes, this topic is a real headache. I had this type of > issue on centos too (although I don't remember with which filetypes). For > now I'm handling this problem in the insecure way.. using the mime and > extension sent by the browser, and marking the file as "insecure" in that > case. It's the only way I can make it work. None of the three mime type > guessers works. I have problems with several file types, including the one > you mention. > BTW, after updating yesterday Symfony 2 I saw that File classes that handle > the uploaded files have changed. I was using "UploadedFile::getExtension" to > get the extension, but now it returns an empty string. It uses pathinfo to > get the extension. I didn't have a deep look at it so I'm not sure why this > happens. I mention it only if it's relevant to someone. In my case I'm just > getting the extension from the original name for now (because the > "guessExtension" obviusly is not working if the mime type is wrong. For a > .docx it's giving me a '.zip' extension). > > I'd like to keep this message alive in case anyone has more comments like > yours about this which are helpful in this topic. > > Thanks! > 2011/6/17 matteosister >> >> yes same problem here. >> I'm on ubuntu too. >> I' think it's a problem bound to proprietary file types. >> Take a look at /etc/mime.types for mime supported by your system. >> >> For me the problem comes with .doc documents. It says that it is a >> application/vnd.ms-office instead of ms-word >> >> This is why microsoft sucks. >> >> On 17 Giu, 15:22, Gustavo Adrian wrote: >> > Is someone having this issue? >> > >> > 2011/6/16 Gustavo Adrian >> > >> > >> > >> > >> > >> > >> > >> > > Hi all, >> > >> > > I wanted to ask you guys if you've found a "definitive" way to handle >> > > mime >> > > type detection issues. I recently implemented file upload handling in >> > > my app >> > > with Symfony 2 and I'm having problems detecting, for example, .docx >> > > files. >> > > When I upload a .docx, it detects a mime type of "application/zip". I >> > > have >> > > this issue with other file types too (like .csv). >> > >> > > I know this is not a Symfony 2 specific problem, I had this problem >> > > before, >> > > but I'd like to know what do you think about this. I'm using right >> > > now: >> > >> > > Apache 2.2.16 >> > > PHP 5.3.3 >> > > Ubuntu 11 >> > >> > > and I have FileInfo v1.0.5-dev >> > >> > > How do you handle this situations? >> > >> > > Thanks. >> >> -- >> If you want to report a vulnerability issue on symfony, please send it to >> security at symfony-project.com >> >> You received this message because you are subscribed to the Google >> Groups "symfony users" group. >> To post to this group, send email to symfony-users@googlegroups.com >> To unsubscribe from this group, send email to >> symfony-users+unsubscr...@googlegroups.com >> For more options, visit this group at >> http://groups.google.com/group/symfony-users?hl=en > > -- > If you want to report a vulnerability issue on symfony, please send it to > security at symfony-project.com > > You received this message because you are subscribed to the Google > Groups "symfony users" group. > To post to this group, send email to symfony-users@googlegroups.com > To unsubscribe from this group, send email to > symfony-users+unsubscr...@googlegroups.com > For more options, visit this group at > http://groups.google.com/group/symfony-users?hl=en > -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en
Re: [symfony-users] Re: File upload and mime type detection issues
Thanks for the tip! Yes, this topic is a real headache. I had this type of issue on centos too (although I don't remember with which filetypes). For now I'm handling this problem in the insecure way.. using the mime and extension sent by the browser, and marking the file as "insecure" in that case. It's the only way I can make it work. None of the three mime type guessers works. I have problems with several file types, including the one you mention. BTW, after updating yesterday Symfony 2 I saw that File classes that handle the uploaded files have changed. I was using "UploadedFile::getExtension" to get the extension, but now it returns an empty string. It uses pathinfo to get the extension. I didn't have a deep look at it so I'm not sure why this happens. I mention it only if it's relevant to someone. In my case I'm just getting the extension from the original name for now (because the "guessExtension" obviusly is not working if the mime type is wrong. For a .docx it's giving me a '.zip' extension). I'd like to keep this message alive in case anyone has more comments like yours about this which are helpful in this topic. Thanks! 2011/6/17 matteosister > yes same problem here. > I'm on ubuntu too. > I' think it's a problem bound to proprietary file types. > Take a look at /etc/mime.types for mime supported by your system. > > For me the problem comes with .doc documents. It says that it is a > application/vnd.ms-office instead of ms-word > > This is why microsoft sucks. > > On 17 Giu, 15:22, Gustavo Adrian wrote: > > Is someone having this issue? > > > > 2011/6/16 Gustavo Adrian > > > > > > > > > > > > > > > > > Hi all, > > > > > I wanted to ask you guys if you've found a "definitive" way to handle > mime > > > type detection issues. I recently implemented file upload handling in > my app > > > with Symfony 2 and I'm having problems detecting, for example, .docx > files. > > > When I upload a .docx, it detects a mime type of "application/zip". I > have > > > this issue with other file types too (like .csv). > > > > > I know this is not a Symfony 2 specific problem, I had this problem > before, > > > but I'd like to know what do you think about this. I'm using right now: > > > > > Apache 2.2.16 > > > PHP 5.3.3 > > > Ubuntu 11 > > > > > and I have FileInfo v1.0.5-dev > > > > > How do you handle this situations? > > > > > Thanks. > > -- > If you want to report a vulnerability issue on symfony, please send it to > security at symfony-project.com > > You received this message because you are subscribed to the Google > Groups "symfony users" group. > To post to this group, send email to symfony-users@googlegroups.com > To unsubscribe from this group, send email to > symfony-users+unsubscr...@googlegroups.com > For more options, visit this group at > http://groups.google.com/group/symfony-users?hl=en > -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en