Can I trust the file type from $_FILES?

Question

Can I trust the file type from $_FILES when uploading images? Or do I have to check again with exif_imagetype() ?

Answer 1

From the documentation:

The mime type of the file, if the browser provided this information. An example would be "image/gif". This mime type is however not checked on the PHP side and therefore don't take its value for granted.