Securing uploads

[swamp]

Hi,

 

Can someone please help me make sure the following script only uploads gif/jpg files please?

 

Thanks in advance!

 

<?php
//create the directory if doesn't exists (should have write permissons)
if(!is_dir("files")) mkdir("files", 0755); 
//move the uploaded file
echo $_FILES['Filedata']['type'];
move_uploaded_file($_FILES['Filedata']['tmp_name'], "files/".$_FILES['Filedata']['name']);
chmod("files/".$_FILES['Filedata']['name'], 0777);

?>

[asmith]

it won't, change the last part to this :

 

<?php

if  (end(explode($_FILES['Filedata']['name'])) == 'gif' || end(explode($_FILES['Filedata']['name'])) == 'jpg')
{
move_uploaded_file($_FILES['Filedata']['tmp_name'], "files/".$_FILES['Filedata']['name']);
chmod("files/".$_FILES['Filedata']['name'], 0777);
}

?>