Jump to content

Upload script


Tom10

Recommended Posts

if($_SERVER['REQUEST_METHOD'] == "POST")
{
	$dir = "./";
	$file = $dir . basename($_FILES['userfile']['name']);
	$ext = pathinfo($file, PATHINFO_EXTENSION);
	$filename = $_FILES['userfile']['name'];

	$allowed = array('jpg', 'png', 'gif', 'bmp');

	if($_FILES['userfile']['size'] > 10000)
	{
		die("File is too large!");
	}
	if($ext != $allowed)
	{
		die("Invalid Image File. Possible hack attempt!");
	}
	if(move_uploaded_file($_FILES['userfile']['tmp_name'], $dir))
	{
		echo "File: ".$_FILES['userfile']['name']." has been uploaded to ".$dir."! ";
	} else
	{
		die("Error: ".$_FILES['userfile']['error']." ");
	}
}

This part is the problem

if($ext != $allowed)
	{
		die("Invalid Image File. Possible hack attempt!");
	}
Link to comment
https://forums.phpfreaks.com/topic/295386-upload-script/
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.