Hey I am using arc to manage my file uploads, and I am using the file extension whitelist, as it is in the examples, but is that safe enough? Is it possible to have different checking on file(images, other types of files as well like docx, zip, etc) uploads? I found this: file_info | Hex but it d…

oh wait… what about using path only? I am not sure the filename should be included. from docs… “multipart-558399-917557-1” is the name Plug gave to our uploaded file. Filename is just the real name of the file, but the tmp file is called multipart…

[image] benonymus: but it deosn’t want to work yet How is it not wanting to work yet? What error did you get?

Hey I am getting this for this file upload: %Plug.Upload{ content_type: "application/pdf", filename: "random-grid.pdf", path: "/tmp/plug-1569/multipart-1569287514-743406783659766-2" } and I am trying to do this: FileInfo.get_info(attachment.filename) I also tried to append the filename at…

[image] benonymus: FileInfo.get_info(attachment.filename) This for sure will not work… How do You append the file and path?

FileInfo.get_info("#{attachment.path}#{attachment.filename}")

You miss a slash in between, as I thought… the path is not valid without.

still doesnt want to work: %Plug.Upload{ content_type: "application/pdf", filename: "random-grid.pdf", path: "/tmp/plug-1569/multipart-1569289758-138513881763554-3" } FileInfo.get_info("#{attachment.path}/#{attachment.filename}") getting the same error, but it did miss the slash so thank yo…

If i do just the underlying command: System.cmd("file", ["--mime-type" | ["#{attachment.path}/#{attachment.filename}"]]) then the result is this: {“/tmp/plug-1569/multipart-1569290249-648297072043659-1/random-grid.pdf: cannot open `/tmp/plug-1569/multipart-1569290249-648297072043659-1/random-gri…

It is working fine on my pc with a pdf file… iex> FileInfo.get_info "/Users/koko/downloads/MarcAurelePensees.pdf" %{ "/Users/koko/downloads/MarcAurelePensees.pdf" => %FileInfo.Mime{ arguments: %{}, subtype: "pdf", type: "application" } } But your error seems to be a non existant fi…

ok, that says it doesn’t exist, but then how can plug and arc give a path to it and upload it?

From docs … Note: This file is temporary, and Plug will remove it from the directory as the request completes. If we need to do anything with this file, we need to do it before then.

How to validate files uploaded by user effectively?

Questions & Help Questions

kokolegorille September 24, 2019, 1:46am 4

This for sure will not work… How do You append the file and path?