cached_url: perform mimetype validation before possible HOOK_SEND_LOCAL_FILE hooks

include/functions.php

@@ -1811,15 +1811,6 @@
 
 			if (is_writable($filename)) touch($filename);
 
-			$tmppluginhost = new PluginHost();
-
-			$tmppluginhost->load(PLUGINS, PluginHost::KIND_SYSTEM);
-			$tmppluginhost->load_data();
-
-			foreach ($tmppluginhost->get_hooks(PluginHost::HOOK_SEND_LOCAL_FILE) as $plugin) {
-				if ($plugin->hook_send_local_file($filename)) return true;
-			}
-
 			$mimetype = mime_content_type($filename);
 
 			// this is hardly ideal but 1) only media is cached in images/ and 2) seemingly only mp4
@@ -1837,6 +1828,15 @@
 				return false;
 			}
 
+			$tmppluginhost = new PluginHost();
+
+			$tmppluginhost->load(PLUGINS, PluginHost::KIND_SYSTEM);
+			$tmppluginhost->load_data();
+
+			foreach ($tmppluginhost->get_hooks(PluginHost::HOOK_SEND_LOCAL_FILE) as $plugin) {
+				if ($plugin->hook_send_local_file($filename)) return true;
+			}
+
 			header("Content-type: $mimetype");
 
 			$stamp = gmdate("D, d M Y H:i:s", filemtime($filename)) . " GMT";