does this code look like it would check a file extensions, and disallow php files or exe files to be attached

From: Date: Thu, 14 Jun 2007 12:13:27 +0000
Subject: does this code look like it would check a file extensions, and disallow php files or exe files to be attached
Groups: php.general 
Request: Send a blank email to php-general+get-256984@lists.php.net to get a copy of this message
<?php $filelinks=t3lib_div::_POST('file_name'); // the posting of the file name
$exttypes = "php3,php,exe";                                     // list of
extensions that shouldnt be used
$fileextension = substr($filelinks,0,strpos($filelinks,"."));     //get the
extension after the .
if ($fileextension == $exttypes['php']['php3']['exe']) {         //if the
file extension equals php, php3, or exe
   echo "mime type doesn't work";                                 //if the
extension is php, php3, exe, than echo doesn't work }
   if ($fileextension != $extypes['php']['php3']['exe']) {     //if the
file extension doesn't equal php, php3, or exe than
                                                               // store the
file
       $filelinks = $this->storeFile();
       }
?> I'm not a programmer, and I'm very new at php so im sure there are errors and stupid logic in my code. It would be greatly appreciated if anyone here could critique and rip apart my code. thank you, -dave

« previous php.general (#256984) next »