I have a code part that checks if:
($_FILES["fileToUpload"]["type"] == "image/gif" || $_FILES["fileToUpload"]["type"] == "image/jpeg" || $_FILES["fileToUpload"]["type"] == "image/png")
What can I replace 'image/gif' with to make it filter pdf's and also mp3s?
See list of MIME types.
You could write your code easier to read like this:
$mime_filter = array(
'image/gif', 'image/jpeg', 'image/png',
'application/pdf',
'audio/mpeg', 'audio/mpeg3', 'audio/x-mpeg', 'audio/x-mpeg-3');
if (in_array($_FILES["fileToUpload"]["type"], $mime_filter)) {
// ...
Not exactly an answer to your question, but rather an aside:
Checking the type value does not tell you anything at all. This value is produced by the browser and is not checked by PHP on the server side (many similar questions here on SO have answers pointing this out -- check the "related" sidebar on the right). Browsers can be configured to send anything at all for any specified file extension, so if you use this value you are in effect blindly trusting user input (bad).
It's better to just extract the extension from the filename and do what you will with that.
Update: I didn't expect to be upvoted too much, but as things stand I feel I should provide some more information.
If you aren't OK with working with just the file extension, you can get the MIME type of a file by using the fileinfo functions as usoban says. Unfortunately, that's only available on PHP 5.3 and up.
A more compatible option is presented as the answer to How to get the content-type of a file in PHP? here on SO (although I find the answer as presented to be a bit of overkill, it's good by any standard).
Please do not only check for $_FILES['name']['type'], since it's browser who sends this information and it's quite easy to forge the information and for example inject code into file.
To make it more secure, use MIME type checking using FileInfo functions, though, especially with mp3 files, it may be only recognized as application/octet-stream
A small selection of MIME types includes:
audio/mpeg: MP3 or other MPEG audio; Defined in RFC 3003 application/pdf: Portable Document Format, PDF has been in use for document exchange on the Internet since 1993; Defined in RFC 3778
