On Monday 10 July 2006 17:02, Jeff Tapper wrote:
> part of my brain may well have atrophied by now.  is it possible for a user
> to manually set the mimetype of a file to something other than what it
> really is?

It it's set by the client, yes, of course.
http://www.w3.org/TR/device-upload:
"Each part of such a submission, representing the value of each input element 
in the submitted form, is given a Content-Disposition header, which in the 
case of Content-Disposition: file, may also have a Content-Type header 
representing the MIME type of the data being uploaded. Files uploaded using 
the extensions in this draft should include a Content-Type header when the 
file type is known or can be accurately determined by the client browser."

So it depends if CF uses that, or server-side 'magic' instead. The LiveDocs 
for cffile say "The browser uses file extension to determine file type." 
which sounds like CF trusts what the browser says. Tsk if so.

-- 
Tom Chiverton

****************************************************

This email is sent for and on behalf of Halliwells LLP.

Halliwells LLP is a limited liability partnership registered in England and 
Wales under registered number OC307980 whose registered office address is at St 
James's Court Brown Street Manchester M2 2JF.  A list of members is available 
for inspection at the registered office. Any reference to a partner in relation 
to Halliwells LLP means a member of Halliwells LLP. Regulated by the Law 
Society.

CONFIDENTIALITY

This email is intended only for the use of the addressee named above and may be 
confidential or legally privileged.  If you are not the addressee you must not 
read it and must not use any information contained in nor copy it nor inform 
any person other than Halliwells LLP or the addressee of its existence or 
contents.  If you have received this email in error please delete it and notify 
Halliwells LLP IT Department on 0870 365 8008.

For more information about Halliwells LLP visit www.halliwells.com.



------------------------ Yahoo! Groups Sponsor --------------------~--> 
Check out the new improvements in Yahoo! Groups email.
http://us.click.yahoo.com/6pRQfA/fOaOAA/yQLSAA/nhFolB/TM
--------------------------------------------------------------------~-> 

--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/flexcoders/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 


Reply via email to