CODEWITHSUNDEEP
coldfusionmime-typescoldfusion-10
Daniel Cook
Daniel Cook

Reputation: 1043

ColdFusion 10 CFFILE Accept mimetype not recognised

I'm having problems uploading WMV and MPEG files, 'video/x-ms-wmv' (etc) are on the accept list - I get an error of

The MIME type or the Extension of the uploaded file application/octet-stream was not accepted by the server

Using Chrome, I check the header and it reads

Content-Disposition: form-data; name="fv_file"; filename="blahblah.wmv" Content-Type: video/x-ms-wmv

the Client machine also has the WMV registry entry which appears correct.

Server side Apache is configured to use the OS mime type file: /etc/mime.types. This file contains entries for wmv and mpeg: video/x-ms-wmv wmv video/mpeg mpeg

How does CF10 determine the mimetype? I'm struggling to find out this information. Does anyone have a solution?

Thanks

edit- Added Code

<cffile action="UPLOAD" filefield="fv_file" destination="#pathtotheserverroot##mediadir#/video/" nameconflict="MAKEUNIQUE"   accept="#qry_xxxx.OT_MIMETYPES#" mode="644">

The value of OT_MIMETYPES is

video/mp4,video/mpeg,video/quicktime,video/x-msvideo,video/x-sgi-movie,video/avi,video/vnd.vivo,application/vnd.rn-realmedia,video/vnd.rn-realvideo,audio/vnd.rn-realaudio,audio/x-pn-realaudio,video/x-ms-wmv,audio/mpeg,video/mpg,video/mpe,video/x-ms-asf,video/x-m4v

I did a CFDUMP for completeness

Accept   video/mp4,video/mpeg,video/quicktime,video/x-msvideo,video/x-sgi-movie,video/avi,video/vnd.vivo,application/vnd.rn-realmedia,video/vnd.rn-realvideo,audio/vnd.rn-realaudio,audio/x-pn-realaudio,video/x-ms-wmv,audio/mpeg,video/mpg,video/mpe,video/x-ms-asf,video/x-m4v
Detail   Only files of type video/mp4,video/mpeg,video/quicktime,video/x-msvideo,video/x-sgi-movie,video/avi,video/vnd.vivo,application/vnd.rn-realmedia,video/vnd.rn-realvideo,audio/vnd.rn-realaudio,audio/x-pn-realaudio,video/x-ms-wmv,audio/mpeg,video/mpg,video/mpe,video/x-ms-asf,video/x-m4v can be uploaded. Verify that you are uploading a file of the appropriate type.
Message  The MIME type or the Extension of the uploaded file application/octet-stream was not accepted by the server.
MimeType     application/octet-stream

Upvotes: 0

Views: 3652

Answers (2)

Miguel-F
Miguel-F

Reputation: 13548

I will have to speculate until I can see your <cffile> code but my guess is that you have not allowed the appropriate mime type under the accept attribute of the <cffile> tag.

Now that you have included your code my assumption has been confirmed: you have not allowed the appropriate mime type under the accept attribute of the <cffile> tag.

See below for further details.

Several changes were made to how the <cffile> tag works in ColdFusion 10. You may or may not be aware that in ColdFusion 10 they added the strict attribute to the tag (documentation reference).

  • When strict is true, only MIME types or a combination of MIME types and extensions are allowed in the accept attribute. Since strict is true by default, you should specify MIME types for the accept attribute.
  • When strict is false, either MIME types or extensions or a combination of both can be specified as a value to the accept attribute. For more information, see this blog entry.

Not only was that attribute added, but the default value for the strict attribute is true. So because you have not specified it within your code it is on.

Note: If you receive an error like "The MIME type of the uploaded file (image/jpeg) was not accepted by the server", enter accept="image/jpeg" to accept JPEG files.

Taken from the Adobe documentation here. From the error message that you have posted an attempt was made to upload a file with mime type of "application/octet-stream". You appear to be expecting "video/x-ms-wmv". So you can try to figure out why your browser is attempting to upload the file as "application/octet-stream" or add that mime type to your accept attribute. WARNING: that will also allow other types of files to be uploaded that you probably don't want.

The cffile accept attribute uses the mime type that your browser sends to the server. Read that again... your browser tells cffile what the mime type is. It's very easy to spoof the mime type

Taken from Pete Freitag's page on Tips for Secure File Uploads with ColdFusion. (An older article but still has relevant tips.)

A couple of other references I found that may be helpful:

Upvotes: 6

Scott Jibben
Scott Jibben

Reputation: 2287

You may have some odd mime type. If you use a try/catch block around your tag, you can display the full error message.

Example:

<cftry>
    <cffile accept="video/x-ms-wmv" action="upload" destination="#ExpandPath('/client-images/')#" filefield="form.UploadFile" nameconflict="makeunique">
    <cfcatch type="any">
        <cfdump var="#cfcatch#" label="cfcatch">
    </cfcatch>
</cftry>

The dump will display the mime type that ColdFusion thinks that was uploaded.

This is for development/analysis only, you wouldn't want to present the dump to regular site visitors.

Upvotes: 0

Related Questions