Re: File upload directive: $_FILES['filename']['name'] instead of $_FILES['filename']['tmp_name']
| From: | Richard Quadling | Date: | Wed, 23 Dec 2009 15:10:51 +0000 |
| Subject: | Re: File upload directive: $_FILES['filename']['name'] instead of $_FILES['filename']['tmp_name'] | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-300646@lists.php.net to get a copy of this message | ||
2009/12/22 Andrei Iarus <poni1111@yahoo.com>:
> Hello,
>
> On my production & testing servers (production runs on a centrino and testing runs on
> Windows) I can only access the temporary uploaded file using
> ini_get( 'upload_tmp_dir' . '/' .
> $_FILES['filename']['name'];
> while the file $_FILES['filename']['tmp_name'] simply does not exist
> (checked with file_exists() function, and also looking in the temporary folder).
>
> Is there a problem with my PHP installations? Is there any directive to change this bihaviour?
>
> On production: PHP 5.2.10 and on testing: PHP 5.2.8 and 5.3.0
>
> Thanks in advance.
>
>
>
2 functions to get to grips with:
1 - is_uploaded_file()
2 - move_uploaded_file()
Example from http://php.net/is_uploaded_file
<?php
if (is_uploaded_file($_FILES['userfile']['tmp_name'])) {
echo "File ". $_FILES['userfile']['name'] ." uploaded
successfully.\n";
echo "Displaying contents\n";
readfile($_FILES['userfile']['tmp_name']);
} else {
echo "Possible file upload attack: ";
echo "filename '". $_FILES['userfile']['tmp_name'] .
"'.";
}
?>
--
-----
Richard Quadling
"Standing on the shoulders of some very clever giants!"
EE : http://www.experts-exchange.com/M_248814.html
Zend Certified Engineer : http://zend.com/zce.php?c=ZEND002498&r=213474731
ZOPA : http://uk.zopa.com/member/RQuadling