PHP File Upload

[netcat-na-diary]

PHP File Upload

form action="upload_file.php" method="post" enctype="multipart/form-data"
			<label for="file">Filename</label>
			<input type="file" name="file" id="file"><br>
			<input type="submit" name="submit" value="Submit">
		/form

upload_file.php

<?php
	if($_FILES["file"]["error"] > 0)
	{
		echo "Error: " . $_FILES["file"]["error"] . "<br/>";
	}
	else 
	{
		echo "Upload: " . $_FILES["file"]["name"] . "<br/>";
		echo "Type: " . $_FILES["file"]["type"] . "<br/>";
		echo "Size: " . ($_FILES["size"]["type"] /1024) . "<br/>";
		echo "Stored in: " . $_FILES["size"]["tmp_name"] . "<br/>";
	}
?>

• $_FILES["file"]["name"] - the name of the uploaded file


• $_FILES["file"]["type"] - the type of the uploaded file


• $_FILES["file"]["size"] - the size in bytes of the uploaded file


• $_FILES["file"]["tmp_name"] - the name of the temporary copy of
  the file stored on the server


• $_FILES["file"]["error"] - the error code resulting from the file
  upload

Проверка расширения файла (gif, jpeg, jpg или png)

<?php
	$allowedExts = array("gif", "jpeg", "jpg", "png");
	$temp = explode(".", $_FILES["file"]["name"]);
	$extension = end($temp);
	
	if ((($_FILES["file"]["type"] == "image/gif")
	|| ($_FILES["file"]["type"] == "image/jpeg")
	|| ($_FILES["file"]["type"] == "image/jpg")
	|| ($_FILES["file"]["type"] == "image/pjpeg")
	|| ($_FILES["file"]["type"] == "image/x-png")
	|| ($_FILES["file"]["type"] == "image/png"))
	&& ($_FILES["file"]["size"] < 20000)
	&& in_array($extension, $allowedExts))
	{
		if($_FILES["file"]["error"] > 0)
		{
			echo "Error: " . $_FILES["file"]["error"] . "<br/>";
		}
		else 
		{
			echo "Upload: " . $_FILES["file"]["name"] . "<br/>";
			echo "Type: " . $_FILES["file"]["type"] . "<br/>";
			echo "Size: " . ($_FILES["file"]["size"] /1024) . "<br/>";
			echo "Stored in: " . $_FILES["file"]["tmp_name"] . "<br/>";
		}
	}
	else
	{
		echo "Invalid file";
	}
?>

Сохранение загруженного файла в папку на сервере

<?php
	$allowedExts = array("gif", "jpeg", "jpg", "png");
	$temp = explode(".", $_FILES["file"]["name"]);
	$extension = end($temp);
		
	if ((($_FILES["file"]["type"] == "image/gif")
	|| ($_FILES["file"]["type"] == "image/jpeg")
	|| ($_FILES["file"]["type"] == "image/jpg")
	|| ($_FILES["file"]["type"] == "image/pjpeg")
	|| ($_FILES["file"]["type"] == "image/x-png")
	|| ($_FILES["file"]["type"] == "image/png"))
	&& ($_FILES["file"]["size"] < 200000)
	&& in_array($extension, $allowedExts))
	{
		if($_FILES["file"]["error"] > 0)
		{
			echo "Error: " . $_FILES["file"]["error"] . "<br/>";
		}
		else 
		{
			echo "Upload: " . $_FILES["file"]["name"] . "<br/>";
			echo "Type: " . $_FILES["file"]["type"] . "<br/>";
			echo "Size: " . ($_FILES["file"]["size"] /1024) . "<br/>";
			echo "Temp file: " . $_FILES["file"]["tmp_name"] . "<br/>";
			
			if (file_exists("upload/" . $_FILES["file"]["name"]))
			{
				echo $_FILES["file"]["name"] . " already exists.";
			}
			else
			{
				move_uploaded_file($_FILES["file"]["tmp_name"], "upload/" . $_FILES["file"]["name"]);
				echo "Stored in: " . "upload/" . $_FILES["file"]["name"];
			}
		}
	}
	else
	{
		echo "Invalid file";
	}
?>