Validating MIME type (syntax please)

kilbey1

I've looked at a bunch of information online about MIME types. I want to do something along these lines; can someone help me straighten out my syntax for .doc (Word) attachments?

I want to allow html, rtf, doc, and text for now. Will this work?

//now look to see what type of file is being uploaded
// $userfile_type is mime type e.g. image/gif 
$userfile_type = $HTTP_POST_FILES['attfile']['type']; 
if($userfile_type != ("application/doc" || "text/plaintext" || "text/richtext" || "text/rtf" || "text/html" || "text/htm")) { 
	echo "This isn't a valid file.";
	die();
}

Thanks,
Eve

Shrike

application/msword

Google is a search engine.

kilbey1

Ok, then there's something further wrong, since I always return "Please upload your resume." See code below.

//Validate all fields are filled in first
if ($name <= "") {
	$warning = "Please enter your name."; 
}
else if ($email <= "") {
	$warning = "Please enter your email."; 
}
else if ($_FILES['fileatt']['size'] == 0 || $_FILES['fileatt']['tmp_name'] = '') {
	$warning = "Please attach your resum&eacute;."; 
}

if ($warning) {// If we've set a message with a warning about their form entry... 
   echo $warning;
   appform();
}
else if (!$warning) { //no warnings
	$userfile_type = $HTTP_POST_FILES['attfile']['type']; 
	if($userfile_type == "application/ms-word") { 
		echo "This is a valid file type (.doc).";
		exit;
	} else { 
		echo "This is not a valid file type (not .doc).";
		exit;
	}
}

Shrike

Do print_r($HTTP_POST_FILES) and see what the type actually is.

You should also use $_FILES() with recent versions of PHP, the former is deprecated.

kilbey1

Odd. Even when I'm attaching a file, it comes back empty.

Btw, here's the link if you want to see the page I'm attempting to edit:
http://www.wow-corp.com/temp/oppr.php