Help needed with file uploads

[cs1h]

Hi,

 

I know this is a tall order but does anyone know how I would edit the following script so that it only accepts .jpg files and also has a size limit (preferally in pixels). I am still new to php and don't know what else to try.

 

The script is,

 

<?php 

// Generate a random number
$newname = rand(10,100);
//This is the directory where images will be saved 
$target = "mgs/";  



if ($_FILES['photo']['tmp_name']) {
           $target = $target . basename( $_FILES['photo']['name']);
} else {
           $target = $target . "dfxfd.jpg";
}
$target = str_replace(' ', $newname, $target); // <--- then add the random number in here to replace any spaces
$target = str_replace('o', $newname, $target);
$target = str_replace('a', $newname, $target);
$target = str_replace('e', $newname, $target);
$target = str_replace('0', $newname, $target);
$target = str_replace('i', $newname, $target);
$target = str_replace('u', $newname, $target);

$targetb = $_POST['menuFilesDMA'];
$targetb = str_replace(' ','_', $targetb);

$targetc = $_POST['menuSubjectsDMA'];
$targetc = str_replace(' ','_', $targetc);

//This gets all the other information from the form 
$name=$_POST['name'];
$continent=($targetc);
$country=($targetb);
$town=$_POST['title2']; 
$type=$_POST['Catagory'];
$Email=$_POST['Email']; 
$Title=$_POST['title']; 
$Abstract=$_POST['message'];
$Article=$_POST['messagetwo'];  
$pic=($target); 

// Connects to your Database 
mysql_connect("localhost", "xxx", "xxx") or die(mysql_error()) ; 
mysql_select_db("real") or die(mysql_error()) ; 

//Writes the information to the database 
mysql_query($sql = "insert into `items` (`name`, `Continent`, `country`, `town`, `type`, `alltype`, `Email`, `Title`, `Abstract`, `Article`, `photo`) values ('$name', '$continent', '$country', '$town', '$type', 'all', '$Email', '$Title', '$Abstract', '$Article', '$pic')"); 

//Writes the photo to the server 
if(move_uploaded_file($_FILES['photo']['tmp_name'], $target)) 
{ 

//Tells you if its all ok 
echo "The file ". basename( $_FILES['uploadedfile']['name']). " has been uploaded, and your information has been added to the directory click <a href=expage.php>here</a> to continue."; 

} 
else { 

//Gives and error if its not 
echo "Sorry, there was a problem uploading your file. Click <a href=add.php>here</a> to try again"; 
} 
?>

 

 

Any help would be much appriciated,

 

Thanks

Colin

[apulmca2k4]

Yes, I can do it. contact on apulmca2k4@gmail.com

[JasonLewis]

Uh, if you're an expert, why not share your knowledge here? "

 

Anyway, cs1h, I suggest you look at functions like getimagesize(). From that function you can get the available information to check if the image is of the right size and of the right extension.

 

There are other ways to get a files extension though. Example:

 

$filename = "hello.there.jpg";

$tmp_fn = explode(".", $filename);

echo $tmp_fn[count($tmp_fn)-1]; //Will echo jpg