Home
FileTypeChecker - Don't let users to inject you an invalid file
FileTypeChecker is a easy to use library that allows you to identify type of file. This will help you to validate all files that are provided by external sources.
Have you ever had a requirement for users to be able to upload files of a certain type? How do you validate that the file type is allowed? How do you protect your application from uploading a malicious file? It is standard practice to use the FileSystemInfo class provided by Microsoft and its Extension property for this kind of job, but is that enough? The answer is simple - No! This is why this small but effective library comes to help.
FileTypeChecker use file's "magic numbers" to identify the type. According to Wikipedia this term ("magic numbers") was used for a specific set of 2-byte identifiers at the beginnings of files, but since any binary sequence can be regarded as a number, any feature of a file format which uniquely distinguishes it can be used for identification. This approach offers better guarantees that the format will be identified correctly, and can often determine more precise information about the file. See more about Magic Numbers
using (var fileStream = File.OpenRead("myFileLocation"))
{
var isRecognizableType = FileTypeValidator.IsTypeRecognizable(fileStream);
if (!isRecognizableType)
{
// Do something ...
}
IFileType fileType = FileTypeValidator.GetFileType(fileStream);
Console.WriteLine("Type Name: {0}", fileType.Name);
Console.WriteLine("Type Extension: {0}", fileType.Extension);
Console.WriteLine("Is Image?: {0}", fileStream.IsImage());
Console.WriteLine("Is Bitmap?: {0}", fileStream.Is<Bitmap>());
}If you are interested in finding more samples please use our wiki page.
Currently FileTypeChecker is able to identify 22 different types but also you are able to register your own types. For more information please visit our wiki page