Sanitize File Names WordPress

[Phpman88]

I recently submitted a plugin to WordPress and they told me to sanitize my file name here is the examples they gave me. 

 

Quote

basename is great, but you also want to sanitize the filenames

image-framer/image-framer.php:135: $targetFile = $targetPath . '/imageframer/' . basename($_FILES['image']['name'][$i]);
image-framer/image-framer.php:138: $returnResponse[$i] = $dir['baseurl'] . '/imageframer/' . $_FILES['image']['name'][$i];
image-framer/image-framer.php:162: $targetFile = $targetPath . '/imageframer/' . basename($_FILES['uploadimg']['name']);
image-framer/image-framer.php:165: $returnResponse = $dir['baseurl'] . '/imageframer/' . $_FILES['uploadimg']['name'];
image-framer/src/Validation.php:13: $imageFileType = strtolower(pathinfo($targetPath . '/imageframer/' . basename($_FILES['image']['name'][$index]), PATHINFO_EXTENSION));

How would I go about sanitizing file names? Thanks all for your help.

[maxxd]

WP offers several sanitization functions - looks like you need sanitize_file_name().

[Jasperleo654]

On 12/3/2021 at 9:37 AM, Phpman88 said:

I recently submitted a plugin to WordPress and they told me to sanitize my file name here is the examples they gave me. 

 

image-framer/image-framer.php:135: $targetFile = $targetPath . '/imageframer/' . basename($_FILES['image']['name'][$i]);
image-framer/image-framer.php:138: $returnResponse[$i] = $dir['baseurl'] . '/imageframer/' . $_FILES['image']['name'][$i];
image-framer/image-framer.php:162: $targetFile = $targetPath . '/imageframer/' . basename($_FILES['uploadimg']['name']);
image-framer/image-framer.php:165: $returnResponse = $dir['baseurl'] . '/imageframer/' . $_FILES['uploadimg']['name'];
image-framer/src/Validation.php:13: $imageFileType = strtolower(pathinfo($targetPath . '/imageframer/' . basename($_FILES['image']['name'][$index]), PATHINFO_EXTENSION));

How would I go about sanitizing file names? Thanks all for your help.

A year ago, I was also searching for its answer, but today I know.