Reply to thread

Message

<blockquote data-quote="viraj_slk" data-source="post: 5242712" data-attributes="member: 51932">machn mama php walata very new. but i did a simple uploader recently. is this what you are looking for?-------------------------------[PHP]&lt;?php/**&nbsp;* @author 'me'&nbsp;* @copyright 2009&nbsp;*/&nbsp;define(&quot;MAX_FILE_SIZE&quot;, 1048000);&nbsp;&nbsp;//Funciton to print blank rows.&nbsp;function br(){ print &quot;&lt;br /&gt;&quot;;}&nbsp;&nbsp;if ( isset($_FILES['fupload']) ){&nbsp; &nbsp;&nbsp; print &quot;&lt;p&gt; Thanks for the upload.. processing your file now.. &lt;/p&gt;&quot;;&nbsp; &nbsp;&nbsp; br();&nbsp; &nbsp;&nbsp; &nbsp; &nbsp;&nbsp; $file_type = $_FILES['fupload']['type'];&nbsp; &nbsp;&nbsp; if (&nbsp; ( $file_type == &quot;image/jpeg&quot;) || ($file_type == &quot;image/pjpeg&quot;) || ($file_type == &quot;image/gif&quot;) ) {&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; //To check if the file size exceeds the specified limit..&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; if ($_FILES['fupload']['size'] &gt; MAX_FILE_SIZE)&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; print &quot;Your file size exceed the maximum specified size of &quot;.MAX_FILE_SIZE;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; exit;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; //Now we just print some info. about the file to the screen&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; print &quot;file name: &quot;.$_FILES['fupload']['name']; br();&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; print &quot;file size: &quot;.$_FILES['fupload']['size']; br();&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; print &quot;file type: &quot;.$_FILES['fupload']['type']; br();&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; print &quot;file tmp_name(temp path): &quot;.$_FILES['fupload']['tmp_name']; br();&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; //Specifying source and the target (destination) for our file&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $source = $_FILES['fupload']['tmp_name'];&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $target = &quot;upload/&quot;.$_FILES['fupload']['name'];&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; //Moving file to the destination&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; move_uploaded_file($source, $target);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; //Prints the image according&nbsp; to its original height and width&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $img_size =&nbsp; getImageSize($target);&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $imgstr = &quot;&lt;p&gt; &lt;img src=\&quot;$target\&quot; width=\&quot;$img_size[0]\&quot; &quot;;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $imgstr .= &quot; height=\&quot;$img_size[1]\&quot; alt = \&quot;uploaded image here\&quot;&nbsp; &nbsp; /&gt; &lt;/p&gt;&quot;;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; //Display the successfully uploaded image &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; print $imgstr;&nbsp; &nbsp;&nbsp; }&nbsp; &nbsp;&nbsp; else{&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; //Show error message&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; print &quot;Your file type &quot;.$_FILES['fupload']['type'].&quot; cannot be proecessed. &lt;br&gt; Please upload as .jpeg or .gif&quot;;&nbsp; &nbsp;&nbsp; }&nbsp;}&nbsp;else{&nbsp; &nbsp;&nbsp; #If the user arrives on the web page for the first time -&gt; then '$_FILES['fupload'])' is not set&nbsp; &nbsp;&nbsp; print &quot;Welcome. Please upload any   ( .jpg/.jpeg/.gif&nbsp; )   picture files.&quot;; br();&nbsp;}?&gt;&nbsp;&lt;!DOCTYPE html PUBLIC &nbsp; &nbsp;&nbsp; &quot;-//W3C//DTD XHTML 1.0 Strict//EN&quot; &nbsp; &nbsp;&nbsp; &quot;http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd&quot;&gt; &nbsp;&lt;html&gt;&nbsp;&lt;head&gt;&nbsp;&lt;title&gt;File uploader&lt;/title&gt;&nbsp;&lt;/title&gt;&nbsp;&lt;body&gt;&nbsp;&lt;form enctype=&quot;multipart/form-data&quot; &nbsp; &nbsp;&nbsp; action=&quot;&lt;?php print $_SERVER['PHP_SELF']?&gt;&quot; method=&quot;post&quot;&gt;&nbsp;&lt;p&gt;&nbsp;&lt;input type=&quot;file&quot; name=&quot;fupload&quot; /&gt;&lt;br/&gt;&nbsp;&lt;input type=&quot;submit&quot; value=&quot;upload!&quot; /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp;&lt;/p&gt;&nbsp;&lt;/form&gt;&nbsp;&nbsp;&lt;/body&gt;&nbsp;&lt;/html&gt;&nbsp; &nbsp;&nbsp; [/PHP]this is pretty simple code to let user upload images. when the upload is successful, you can write something into&nbsp; your database. I guess something like the location of the image within your server.be careful when you let people upload images or whatever. that's why i check whether the files are really in image format. Still it's better if you can replace some things in the file names with underscore.for example, a very popular way of shell upload (eg. c99 shell ) is to rename the php file to something like pretty.php.jpgwhen you upload this to some servers, some servers try to process the php code that's really in the file. but some servers do not do that. so its good if you can extract the file name, which in this case is 'pretty.php' and replace any unnecessary characters such as '.' with underscores. there is a better tool to check if uploaded files are really image files. i can't remember it now. google is your friend <img src="/styles/default/xenforo/smilies/default/happy.gif"&nbsp; class="smilie" loading="lazy" alt=":)" title="Happy&nbsp; &nbsp; :)" data-shortname=":)" />Hope this helps</blockquote>

[QUOTE="viraj_slk, post: 5242712, member: 51932"] machn mama php walata very new. but i did a simple uploader recently. is this what you are looking for? -------------------------------[PHP]<?php /** * @author 'me' * @copyright 2009 */ define("MAX_FILE_SIZE", 1048000); //Funciton to print blank rows. function br(){ print " ";} if ( isset($_FILES['fupload']) ){ print " Thanks for the upload.. processing your file now.. "; br(); $file_type = $_FILES['fupload']['type']; if ( ( $file_type == "image/jpeg") || ($file_type == "image/pjpeg") || ($file_type == "image/gif") ) { //To check if the file size exceeds the specified limit.. if ($_FILES['fupload']['size'] > MAX_FILE_SIZE) { print "Your file size exceed the maximum specified size of ".MAX_FILE_SIZE; exit; } //Now we just print some info. about the file to the screen print "file name: ".$_FILES['fupload']['name']; br(); print "file size: ".$_FILES['fupload']['size']; br(); print "file type: ".$_FILES['fupload']['type']; br(); print "file tmp_name(temp path): ".$_FILES['fupload']['tmp_name']; br(); //Specifying source and the target (destination) for our file $source = $_FILES['fupload']['tmp_name']; $target = "upload/".$_FILES['fupload']['name']; //Moving file to the destination move_uploaded_file($source, $target); //Prints the image according to its original height and width $img_size = getImageSize($target); $imgstr = " <img src=\"$target\" width=\"$img_size[0]\" "; $imgstr .= " height=\"$img_size[1]\" alt = \"uploaded image here\" /> "; //Display the successfully uploaded image print $imgstr; } else{ //Show error message print "Your file type ".$_FILES['fupload']['type']." cannot be proecessed. Please upload as .jpeg or .gif"; } } else{ #If the user arrives on the web page for the first time -> then '$_FILES['fupload'])' is not set print "Welcome. Please upload any ( .jpg/.jpeg/.gif ) picture files."; br(); } ?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html> <head> <title>File uploader</title> </title> <body> <form enctype="multipart/form-data" action="<?php print $_SERVER['PHP_SELF']?>" method="post"> <input type="file" name="fupload" /> <input type="submit" value="upload!" /> </form> </body> </html> [/PHP] this is pretty simple code to let user upload images. when the upload is successful, you can write something into your database. I guess something like the location of the image within your server. be careful when you let people upload images or whatever. that's why i check whether the files are really in image format. Still it's better if you can replace some things in the file names with underscore. for example, a very popular way of shell upload (eg. c99 shell ) is to rename the php file to something like pretty.php.jpg when you upload this to some servers, some servers try to process the php code that's really in the file. but some servers do not do that. so its good if you can extract the file name, which in this case is 'pretty.php' and replace any unnecessary characters such as '.' with underscores. there is a better tool to check if uploaded files are really image files. i can't remember it now. google is your friend :) Hope this helps [/QUOTE]

Verification

Payakata winadi keeyak tibeda?

Search

Latest ads

Reply to thread