Use the first 3 bytes to validate JPEG headers.

biz-on · Nov 7, 2018 · fac6b5f · fac6b5f
1 parent 1da893f
commit fac6b5f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/server/php/UploadHandler.php b/server/php/UploadHandler.php
@@ -1075,8 +1075,8 @@ protected function imagetype($file_path) {
         if ($data === 'GIF8') {
             return self::IMAGETYPE_GIF;
         }
-        // JPG: FF D8
-        if (bin2hex(substr($data, 0, 2)) === 'ffd8') {
+        // JPG: FF D8 FF
+        if (bin2hex(substr($data, 0, 3)) === 'ffd8ff') {
             return self::IMAGETYPE_JPEG;
         }
         // PNG: 89 50 4E 47