Uploading file and restricted filetypes!
| From: | Frank Keessen | Date: | Tue, 06 May 2003 18:27:16 +0000 |
| Subject: | Uploading file and restricted filetypes! | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-146547@lists.php.net to get a copy of this message | ||
Hi,
Can you please take a look at my script
- Why is it not giving errors when i'm uploading something other than the restricted
filetypes.. (It now uploads everything).
<?
$host='localhost';
$user='whatever';
$pass = "XXXX";
$db = "something";
$random = rand(1, 999999999999999);
// open database connection
$connection = mysql_connect($host, $user, $pass) or die ("Unable to connect!");
// select database
mysql_select_db($db) or die ("Unable to select database!");
if ($_SERVER['REQUEST_METHOD']=='GET'){
?>
<html>
<body>
<form method="post" enctype="multipart/form-data">
Upload plaatje <input type=file name=file><BR>
<input type=submit value="Toevoegen">
</form>
<?
} else {
$tmp_loc=$_FILES['file']['tmp_name'];
$name=$_FILES['file']['name'];
$type=$_FILES['file']['type'];
}
if (!$error_message){
if ($type == "image/x-png"){
$extension=".png";
}elseif ($type == "image/pjpeg"){
$extension=".jpg";
}elseif ($type == "image/gif"){
$extension=".gif";
}else{
$error_message="Alleen .jpg of .jpeg of .gif of .png toegestaan";
}
$newname="$random$extension";
move_uploaded_file($tmp_loc, "$newname");
$errorList = array();
$count = 0;
if (!$tmp_loc) { $errorList[$count] = "Invalid entry: File"; $count++; }
if (sizeof($errorList) == 0) {
$query = "INSERT INTO image(imagename, time) VALUES('$newname', NOW())";
$result = mysql_query($query) or die ("Error in query: $query. " . mysql_error());
echo "<font size=-1>Succesvol toegevoegd</font>";
echo "$newname";
mysql_close($connection);
} else {
}
}
?>
</body>
</html>