abot the weird file upload problems: code
| From: | Revista Electrónica de Visión porComputador | Date: | Thu, 01 Jan 1970 00:00:00 +0000 |
| Subject: | abot the weird file upload problems: code | ||
| Groups: | php.install | ||
| Request: | Send a blank email to php-install+get-3115@lists.php.net to get a copy of this message | ||
html form:
<form action="file-upload.php" method="post" enctype="multipart/form-data">
<INPUT TYPE="hidden" name="MAX_FILE_SIZE" value="15000000">
<input type="hidden" name="advisor2" value="oak">
<input type="hidden" name="article2" value="test">
Send these files:<br>
<input name="userfile[]" type="file">
<br>
<input name="userfile[]" type="file">
<br>
<input type="submit" value="Send files" name="submit">
</form>
php code:
for($i=0; $i<2; $i++){
if ($userfile_name[$i]){
if (is_uploaded_file($userfile[$i])) {
copy($userfile[$i], "./$userfile_name[$i]");
if(!$entrega){ $entrega = 1; }
} else {
echo "Possible file upload attack: filename '$userfile_name[$i]'.";
}
}
}
any ideas? Please, I'm very new in PHP so I need a LOT of constructive criticism
Jordi