Member Avatar for jaepi

hello there...is there a way to check if the file you get is the file you really want...like for example, you want an .iso file, if yo placed any file like .txt, the system will exit...but if you placed a file with .iso extension, it will continue to run...thanks...

  • 3 Contributors
  • 2 Replies
  • 133 Views
  • 19 Hours Discussion Span
  • Latest Post Latest Post by Salem

Dani AI

Generated

As asked about verifying an .iso, the practical rule is: treat the filename extension as a convenience only. 's quick-extension check is a useful first filter, and is correct that a renamed file can bypass that — real verification must inspect the file itself or its cryptographic checksum/signature.

A minimal, reliable content check for ISO 9660 images is to look for the ASCII identifier "CD001" in the Primary Volume Descriptor. That identifier is typically found at offset 0x8001 (decimal 32769) inside the image; many magic-detection tables and tools use that test. The simplest C++ approach is to open the file in binary mode, seek to that offset, read five bytes and compare them to "CD001". For production use prefer a library such as libmagic (the same engine behind the Unix file utility) and/or verify the publisher's checksum or signature to guard against tampering.

Example minimal C++ check:

#include <fstream>
#include <string>

bool looksLikeIso(const std::string& path) {
    std::ifstream f(path, std::ios::binary);
    if (!f) return false;
    const std::streamoff offset = 0x8001; // 32769
    f.seekg(0, std::ios::end);
    if (f.tellg() < offset + 5) return false;
    f.seekg(offset, std::ios::beg);
    char sig[6] = {0};
    f.read(sig, 5);
    return std::string(sig) == "CD001";
}

Caveats and tips: some images use UDF or hybrid layouts and may not show the same bytes; compressed or container files (ZIP, IMG wrappers) need unpacking first. Always check file size (ensure not truncated), use libmagic for broader detection, and prefer verifying a trusted SHA256/MD5 signature if available. See ISO 9660, a compiled list of file signatures, and the file project (libmagic) for more robust detection.

Recommended Answers

All 2 Replies

Member Avatar for Rashakil Fol

You look at the extension of the filename and see what it is. Using programming. And then use if statements to control your behavior based on the extension.

Member Avatar for Salem

It really doesn't matter what the extension is, you still have to validate its content.

You malicious (or curious) user might just decide to try to rename foo.jpg to foo.iso just to see what happens.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.