常用的MIME类型

上传文件类型的检测方法有这么几种---截取扩展名、获取文件ContentType (MIME) 、读取byte来判断(这个什么叫法来着？)。前两种都有安全问题。容易被上传不安全的文件，如木马什么的。
第1种截取文件扩展名来判断的方法很明显不安 全，第2种ContentType MIME可以伪造，所以用ContentType来判断其实也不安全。建议采用第3种。

.doc     application/msword

.docx   application/vnd.openxmlformats-officedocument.wordprocessingml.document

.rtf       application/rtf

 

.xls     application/vnd.ms-excel application/x-excel

.xlsx    application/vnd.openxmlformats-officedocument.spreadsheetml.sheet

 

.ppt     application/vnd.ms-powerpoint

.pptx    application/vnd.openxmlformats-officedocument.presentationml.presentation

 

.pps     application/vnd.ms-powerpoint

.ppsx   application/vnd.openxmlformats-officedocument.presentationml.slideshow

 

.pdf     application/pdf

.swf    application/x-shockwave-flash

.dll      application/x-msdownload

 

.exe    application/octet-stream

.msi    application/octet-stream

.chm    application/octet-stream

.cab    application/octet-stream

.ocx    application/octet-stream

 

.rar     application/octet-stream

.tar     application/x-tar

.tgz    application/x-compressed

.zip    application/x-zip-compressed

.z       application/x-compress

 

.wav   audio/wav

.wma   audio/x-ms-wma

.wmv   video/x-ms-wmv

.mp3 .mp2 .mpe .mpeg .mpg     audio/mpeg

.rm     application/vnd.rn-realmedia

 

.mid .midi .rmi     audio/mid

 

.bmp     image/bmp

.gif     image/gif

.png    image/png

.tif .tiff    image/tiff

.jpe .jpeg .jpg     image/jpeg

 

.txt      text/plain

.xml     text/xml

.html     text/html

.css      text/css

.js        text/javascript

 

.mht .mhtml   message/rfc822