File Upload Secure Validator
This module enhances file uploads by performing more secure server-side validation. It checks the file's true MIME type against allowed extensions, rather than relying solely on the file name. This provides a more robust security measure for uploaded files.
This is a very simple and small module which performs a server side validation for the extension of an uploaded file of any content type's file field. Default drupal 7 file validation is performed by file_validate_extensions which only relies on the file name extension.
'File Upload Secure Validator' uses the php library 'fileinfo' and is dependent on that. Therefore the server hosting the drupal instance should have this library enabled. Through this php lib we can perform a more secure and reliable check on the file's mime type and compare that to the allowed file extensions, as these are set by the admin within the content type's field settings.
This module is useful when we need to enforce a maximum security mime type detection.
Dependencies
The module depends on the php library fileinfo. Please make sure this library is present and enabled on the server.
Installation
Install module like usual. No special installation considerations
Configuration
No configuration options. After enabling the module, it will perform an alternative server side extension validation on every uploaded file of every content type file field.