[RESOLVED] Need opinion from Expertise

[saraa]

Hi all I want to ask your opinion about this matter. I have made upload form for user using php to uplod their resume so Management can view the resume.
But here I want to know.
What is the best way for user to send their resume?

Upload form (such as what I have done now) so that user just uploads their resume.

OR

Application form where user have to key in every single thing of their data in that form.
(Management asked me to this)

Thanks.

[kows]

well, for them to have to enter in their information might be a hassle but in the end it would be safer. On the other hand, it would be much easier to allow them the ability to upload a document file that you could scan for virus' and stuff immediately, too. It's potentially less safe, but having the ability to do both, I think, would be your best bet. That way, the user gets the final decision on whether he wants to upload it himself or fill in the information.

Also, I would try to look around for any type of "DOC" file reader for PHP so that you could verify the integrity of the file before resaving it on the server (IE: make sure it's actually a document file and not an EXE file). I'm not sure if PHP could do this, but it would make things a lot easier to handle, and would prevent someone from just uploading some application files or whatever.

[CornedBee]

You don't need a full doc file reader for that. Files usually begin with a magic cookie identifying their type - just make sure it's what passes for OLE storage Word files.