Re: PHP and files Upload
| From: | Andy Pieters | Date: | Fri, 21 Oct 2005 08:47:04 +0000 |
| Subject: | Re: PHP and files Upload | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-224389@lists.php.net to get a copy of this message | ||
Hi
As a security precaution, all uploaded files are automatically deleted when
the script goes out of scope.
Use the move_uploaded_file function to move the file somewhere else before
your script ends.
There are various other security precautions you have to consider. And by all
means don't expect the browser to adhere to the limitations you set in the
form, like mime type and max sizes, also know that it is fairly easy for
someone to directly connect to the socket and upload a file, bypassing the
browser altogheter.
The php documentation site covers file uploads in depth (www.php.net)
HTH
With kind regards
Andy
On Wednesday 19 October 2005 00:36, feiticeir0 wrote:
> hello all.
>
> I've managed to create files uploads pages in the past (dont remember if
> alredy with php 5).
>
> till now, i havent need for testing or using.
> today, i've tried to test an upload page (a very simple one) with php 5.0.5
> and i was unable to do it.
>
> the script always says it was sucessful to upload the file, but the
> destination directory was always empty...
> even when checking the $_FILES global
>
> $_FILES['var_name']['tmp_name'] and
> $_FILES['var_name']['name'] and
> $_FILES['var_name']['size'], the vars alwyas return empty values...
>
> is there any issue with php5 about files uploads ?
>
> in php.ini i set the temp directory to /tmp and still nothing works...
>
> Cheers,
>
> Bruno Santos
>
> --
> Open WebMail Project (http://openwebmail.org)
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
--
Now listening to Top! Radio Live www.topradio.be/stream on amaroK
Geek code: www.vlaamse-kern.com/geek
Registered Linux User No 379093
If life was for sale, what would be its price?
www.vlaamse-kern.com/sas/ for free php utilities
--
Attachment: [application/pgp-signature]
Attachment: [application/pgp-signature]