Level 15
@shahzadbuckstec Remove mimes:jpeg,png,jpg,gif. It's already included in the validation rule "image".
1 like
Jul 26, 2018
8
Level 1
Laravel upload image validation failed | hacking threat
Hi There,
I have a very serious issue, Laravel upload image validation not working I can still upload malicious files into the server with an extension "image.shtml". why did validation fail to deduct it?
here is my validation code:
public function store(Request $request){
$validator = Validator::make($request->all(),[
'title' => 'required',
'image' => 'image|mimes:jpeg,png,jpg,gif',
]);
if ($validator->fails()) {
return redirect('memberproduct/create')
->withErrors($validator)
->withInput();
}
}```
Level 122
is the file an image (according to its Mime type, not its filename)?
Level 122
checkout validation of mime types and mimes by file extension
mimetypes:text/plain,... The file under validation must match one of the given MIME types:
'video' => 'mimetypes:video/avi,video/mpeg,video/quicktime' To determine the MIME type of the uploaded file, the file's contents will be read and the framework will attempt to guess the MIME type, which may be different from the client provided MIME type.
mimes:foo,bar,.. The file under validation must have a MIME type corresponding to one of the listed extensions.
Level 1
@Snapey , please i need help,
I added these validation rules and now I'm unable to upload normal(png, jpeg) images.
what should I do now?
$validator = Validator::make($request->all(),[
'title' => 'required',
'image' => 'mimetypes:jpeg,png,jpg',
]);
I got this error but I double check I'm uploading right file
The image must be a file of type: jpeg, png, jpg.
Level 7
change
'image' => 'mimetypes:jpeg,png,jpg',
to
'image' => 'mimes:jpeg,png,jpg'
That should work
Level 53
@shahzadbuckstec Are you testing your code on a linux server or locally on a windows PC?
It might just be that your setup is not capable of correctly determining the mime type of files.
Level 1
Here is my server detail
CentOS Linux release 7.5.1804 (Core)
PHP 7.2.7 (cli) (built: Jul 17 2018 16:51:02) ( NTS )
laravel/framework v5.6.29
This code seems working but it allows the user to upload a file like "xyz.shtml".
'image' => 'mimes:jpeg,png,jpg'
Level 2
I suggest you to try this article for validation of image , file uploading with Laravel
https://www.cloudways.com/blog/laravel-multiple-files-images-upload/
Please or to participate in this conversation.