[Misdetection] PHP file misdetected as image when image is injected at the start of the file

[riklaunim]

If you take an image file, append PHP code to it (and rename to .PHP) it will be recognized as image. Old PHP code injection vulnerabilities were possible with such files when the code used a bad source of mime type detection.

Example file (PNG icon with phpinfo at the end):
example.zip