PHP file upload

qazi_nomi · June 30th, 2004, 04:28 AM

Hi,

Does any one know or treid any PHP File Upload product/program that let me upload images only, not exectuable files
, and if I already have an image in my folder with the same name either change the name of that file or let me
give name to the image before it saves it. I tried many products if one has one thing, it has something else missing, or not user frendly at all.

Thanks

Love 4 all

grimmy · July 1st, 2004, 10:53 AM

why not make an application of your own?
you could set it to deny any filenames which don't end in .jpg, .gif, etc.
i would probably try to make something myself, even if just for the sake of getting more practice with writing php apps.

richard.york · July 11th, 2004, 10:43 PM

Have a look at my file upload article at:
http://p2p.wrox.com/topic.asp?TOPIC_ID=12104

You can see in this file a simple check of the MIME type.

Code:

            // image.  MIME type testing isn't foolproof, it is possible to spoof this.
            // The size testing, however, is not spoofable.

            if (($_FILES['userfile']['size'] <= 10000) && ($_FILES['userfile']['type'] == 'image/jpeg' || $_FILES['userfile']['type'] == 'image/pjpeg'))
            {
                // Give the file a new name to prevent one user from overwriting files

If you want something more foolproof, and don't mind the extra overhead you can also add a call to a function that returns the image's dimensions.

if (@getimagesize($_FILES['userfile']['tmp_name']))

This function call in most contexts would return the image's width and height in pixels as an array. Here I'm simply using the function to verify that a valid image file has been supplied.

See: http://www.php.net/getimagesize

I also added error supression because this function throws a warning if the file supplied is not a valid image.

Regards,
Rich

::::::::::::::::::::::::::::::::::::::::::
The Spicy Peanut Project
http://www.spicypeanut.net
::::::::::::::::::::::::::::::::::::::::::