does this code look like it would check a file extensions, and disallow php files or exe files to be attached
| From: | dave peaachepea | Date: | Thu, 14 Jun 2007 12:13:27 +0000 |
| Subject: | does this code look like it would check a file extensions, and disallow php files or exe files to be attached | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-256984@lists.php.net to get a copy of this message | ||
<?php
$filelinks=t3lib_div::_POST('file_name'); // the posting of the file name
$exttypes = "php3,php,exe"; // list ofextensions that shouldnt be used
$fileextension = substr($filelinks,0,strpos($filelinks,".")); //get theextension after the .
if ($fileextension == $exttypes['php']['php3']['exe']) { //if the
file extension equals php, php3, or exe
echo "mime type doesn't work"; //if theextension is php, php3, exe, than echo doesn't work }
if ($fileextension != $extypes['php']['php3']['exe']) { //if the
file extension doesn't equal php, php3, or exe than
// store thefile
$filelinks = $this->storeFile();
}
?>
I'm not a programmer, and I'm very new at php so im sure there are errors
and stupid logic in my code.
It would be greatly appreciated if anyone here could critique and rip apart
my code.
thank you,
-dave