scanning files when they are uploaded to server

psmshankar

in our application we are asking to user to upload '.doc' and '.zip' files only. If it is doc file, the client is very much worried about the virus...
so they asked whether is it possible to scan for virus and then copy to the server...

is it possible to scan for virus before uploading ..from the server side.??
as like in yahoo.. when u attach a file, it will automatically scan and then allow is it not...just exactly i want..

the Server OS is linux for one client and windows for another client...

can we do it from the server? once the press the submit button after choosing the file to upload, the scope is in server side....so how to call a antivirus porgram to chk that file and then do the neccesary process...

majik-sheff

you can install a command-line based virus on the server that can be called by exec() to check the file and then delete it if it comes up dirty.

Lots of useful links here:

http://www.netsys.com/cgi-bin/display_article.cgi?1124

Weedpacket

Originally posted by majik-sheff
you can install a command-line based virus on the server that can be called by exec() to check the file and then delete it if it comes up dirty.

A suggestion to go with the above; by using php_uname() the script can decide whether it's running on the Linux box or the Windows one, and pick the appropriate command. Saves you having to keep track of two scripts that differ by only a single line.