hi All,

i m in urgent need of some way to restricting users to upload the files other than of "rtf" or "Pdf"

the code i m using is below


string strUploadType = ctrBrowse.PostedFile.ContentType;
string strUploadedFilePath = ctrBrowse.PostedFile.FileName;
string strEjoinPathName = Server.MapPath("..//Uploads//");

strUploadType = ctrBrowse.PostedFile.ContentType;
strUploadedFilePath = ctrBrowse.PostedFile.FileName; intResumeSize = ctrBrowse.PostedFile.ContentLength;

if ((strUploadType != "application/msword" && strUploadType != "application/pdf") || intResumeSize > 500000)


it is working fine for normal case
but the problem is if i rename any image or exe file as .doc, it is taking it as "application/msword" based on extention of file.

can anybody suggest me a solution ... i m in urgent need of this

Not a lot can be done there I doubt - your code just gets what its sent by the browser, and the browser just knows what its told from the OS, which certainly in windows relies heavily on file extension to map to mime type.

/- Sam Judson : Wrox Technical Editor -/

Well....
One hint i got is when i check the Content type of a file by removing its Extension, it do suggest me the correct content type of file

Now the problem i am facing is, i dont know any way of checking the content type of file which id not picked up from browser control

if you can suggest any way for this ...i think the issue will resolve.


Thanks,
Saurav