Manual:MIME type detection/ja

MediaWikiはアップロードファイルのMIME typeを検知することを試み、ファイルの拡張子がmimeタイプにマッチしないファイルを拒否します("The file is corrupt or has an incorrect extension"). 妥当なファイルのためにこのエラーを取得する場合、MIMEタイプを検知するために外部コマンドを使用することを試してみて下さい(下記を参照).

For configuring which types of files MediaWiki will accept for uploads, use.

MIME 検出
インストールされている場合、MediaWiki は FileInfo モジュールまたはより古い MimeMagic モジュールを使用します. mime_magic could not be initialized, magic file is not available のようなエラーを得る場合、このモジュールは正しく設定されていません &mdash; どのように修正をするのか PHP 説明文書を参照するか、外部の mime ディテクター コマンドを使用して下さい(下記を参照).

代わりに、mime タイプを検出するために  オプションを設定することで外部コマンドを利用できます. もっとも共通の設定は:

これはファイルのタイプを決定する GNU  ユーティリティを使用します. このユーティリティは Linux 上ですぐに動作します. 他の Unix によって提供される  ユーティリティは   オプションがサポートされないが故に動作しないことがあります. GNU  は Mac OS-X でも利用可能です. Windows では Cygwin を通して利用可能です.

mime モジュールがインストールされいないで、外部の mime ディテクターのコマンドが設定されていない場合、MediaWiki はmime タイプを検出するために PHP の GD モジュールに依存します. これはよく知られている画像タイプにしか動作せず ( を参照)、他のファイルは追加のチェックがされることなく受け取られます!

を設定することで MIME タイプ チェックを完全に無効にすることもできます &mdash; しかしながらこれはとても不確かであることに注意してください: 任意のファイルが"有害な"ファイル拡張子でアップロードされ、クライアントのコンピューターまたはウェブ サーバーで実行/解釈される可能性があります. 保留: に関連したこれをどうするか?

MIME タイプ検証
MediaWiki stores its default mime types and media types in MimeMap.php.

To support extra mime types for uploads on your wiki, you can use the MimeMagicInit hook since MediaWiki 1.24.

Extra types
The MIME type define file extensions that are allowed for a given mime type. To recognise  files as   for Markdown: Remember to also add the extension to  to allow it to be used for new uploads on your wiki.

You can specify multiple file extensions as well, for example the following is what MediaWiki internally would have done for JPEG: Note that the MIME type of some file formats may be detected too broadly &mdash; any XML-based format may show up as text/xml, any ZIP-based format as application/zip. Consequently, the file extensions for such formats must be associated with their broader MIME type, e.g.:

text/xml xml xsl xslt rss rdf application/zip zip jar xpi application/msword doc xls ppt

Extra info
The "mime info" data is used to resolve aliases for MIME types, and to assign a media type to them. It contains one line per mime type; the first item on the line is the canonical MIME type name (which will be used internally), the last item is of the form [XXX] and defines the media type for the mime type.

To assign  under the "OFFICE" media type: Some examples:

image/png image/x-png	[BITMAP] image/svg image/svg+xml application/svg+xml application/svg	[DRAWING] audio/mp3 audio/mpeg3 audio/mpeg	[AUDIO]

Note that for OGG files, the media type is determined programmatically: AUDIO for vorbis, VIDEO for theora, MULTIMEDIA otherwise.

The media type is specific to MediaWiki, and determines what kind of media is contained in the file, as opposed to what format the file is in. This information is stored in the image table, along with the mime type. It is currently not used for much, but could be used in the future to determine how to present a file to the user. The following types are defined:

UNKNOWN    // unknown format BITMAP     // some bitmap image or image source (like psd, etc). Can't scale up. DRAWING    // some vector drawing (SVG, WMF, PS, ...) or image source (oo-draw, etc). Can scale up. AUDIO      // simple audio file (ogg, mp3, wav, midi, whatever) VIDEO      // simple video file (ogg, mpg, etc; no not include formats here that may contain executable sections or scripts!) MULTIMEDIA // Scriptable Multimedia (flash, advanced video container formats, etc) OFFICE     // Office Documents, Spreadsheets (office formats possibly containing apples, scripts, etc) TEXT       // Plain text (possibly containing program code or scripts) EXECUTABLE // binary executable ARCHIVE    // archive file (zip, tar, etc)

Forbidden files
In addition to the  option, the following settings may cause files to be rejected (even if   is set):


 * , a list of file extensions.
 * , a list of forbidden MIME types.

In addition, MediaWiki rejects all files that look like scripts that could be accidentally executed on either the web server or the user's browser. Notably, anything that looks like one of the following formats will be rejected, regardless of detected mime type or file extension: HTML, JavaScript, PHP, shell scripts. Note that the detection of HTML and JavaScript is rather broad, and may report false positives &mdash; this is so because the Microsoft Internet Explorer is known to interpret files that look like HTML, regardless of file extension or MIME type reported by the web server, which would lead to the site being vulnerable to cross-site scripting attacks. If you really want to allow even such dangerous files, you can hack the  function in the UploadBase.php file to always return false.

ウィルス スキャン
''Pending. for now, see $wgAntivirus and $wgAntivirusSetup''

MIME types when downloading
Note that the MIME type used when the actual file is served to the user's browser is not determined by MediaWikis MIME-detection: files are not served through MediaWiki, but directly by the web server. Thus, the web server must be configured to use the correct MIME type for each file extension &mdash; for example, if you are having trouble viewing SVG files in your browser, make sure the server is configured to deliver them as. (For Apache, read about mod_mime).

関連項目


Older discussion on meta:


 * m:Talk:MediaWiki FAQ
 * Uploading files.