Breaking News: Grepper is joining You.com. Read the official announcement!

cant upload file to directory php

Malario answered on August 31, 2021 Popularity 9/10 Helpfulness 3/10

answer cant upload file to directory php

related php file upload to server folder

cant upload file to directory php

Comment

You'd better check $_FILES structure and values throughly.
The following code cannot cause any errors absolutely.

Example:
<?php

header('Content-Type: text/plain; charset=utf-8');

try {
    
    // Undefined | Multiple Files | $_FILES Corruption Attack
    // If this request falls under any of them, treat it invalid.
    if (
        !isset($_FILES['upfile']['error']) ||
        is_array($_FILES['upfile']['error'])
    ) {
        throw new RuntimeException('Invalid parameters.');
    }

    // Check $_FILES['upfile']['error'] value.
    switch ($_FILES['upfile']['error']) {
        case UPLOAD_ERR_OK:
            break;
        case UPLOAD_ERR_NO_FILE:
            throw new RuntimeException('No file sent.');
        case UPLOAD_ERR_INI_SIZE:
        case UPLOAD_ERR_FORM_SIZE:
            throw new RuntimeException('Exceeded filesize limit.');
        default:
            throw new RuntimeException('Unknown errors.');
    }

    // You should also check filesize here. 
    if ($_FILES['upfile']['size'] > 1000000) {
        throw new RuntimeException('Exceeded filesize limit.');
    }

    // DO NOT TRUST $_FILES['upfile']['mime'] VALUE !!
    // Check MIME Type by yourself.
    $finfo = new finfo(FILEINFO_MIME_TYPE);
    if (false === $ext = array_search(
        $finfo->file($_FILES['upfile']['tmp_name']),
        array(
            'jpg' => 'image/jpeg',
            'png' => 'image/png',
            'gif' => 'image/gif',
        ),
        true
    )) {
        throw new RuntimeException('Invalid file format.');
    }

    // You should name it uniquely.
    // DO NOT USE $_FILES['upfile']['name'] WITHOUT ANY VALIDATION !!
    // On this example, obtain safe unique name from its binary data.
    if (!move_uploaded_file(
        $_FILES['upfile']['tmp_name'],
        sprintf('./uploads/%s.%s',
            sha1_file($_FILES['upfile']['tmp_name']),
            $ext
        )
    )) {
        throw new RuntimeException('Failed to move uploaded file.');
    }

    echo 'File is uploaded successfully.';

} catch (RuntimeException $e) {

    echo $e->getMessage();

}

?>

Popularity 9/10 Helpfulness 3/10 Language php

Source: www.php.net

Tags: directory file php upload

Link to this answer
Share Copy Link

Contributed on Aug 31 2021

Malario

0 Answers Avg Quality 2/10

Closely Related Answers

php file upload to server folder

Comment

<?php
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $targetDirectory = "images/"; // Specify the target directory where you want to save the uploaded images
    $targetFile = $targetDirectory . basename($_FILES["fileToUpload"]["name"]); // Get the target file path

    // Check if the file already exists
    if (file_exists($targetFile)) {
        echo "File already exists. Please choose a different file.";
    } else {
        // Check file size or other validation criteria if needed
        // Move the uploaded image to the target directory
        if (move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $targetFile)) {
            echo "The image " . htmlspecialchars(basename($_FILES["fileToUpload"]["name"])) . " has been uploaded.";
        } else {
            echo "Sorry, there was an error uploading your image.";
        }
    }
}
?>

<!DOCTYPE html>
<html>
<head>
    <title>Image Upload Form</title>
</head>
<body>
    <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post" enctype="multipart/form-data">
        Select Image to Upload:
        <input type="file" name="fileToUpload" id="fileToUpload">
        <input type="submit" value="Upload Image" name="submit">
    </form>
</body>
</html>

Popularity 7/10 Helpfulness 10/10 Language php

Source: Grepper

Tags: file-upload php

Link to this answer
Share Copy Link

Contributed on Oct 30 2023

Different Dotterel

0 Answers Avg Quality 2/10

cant upload file to directory php

Contents

More Related Answers

cant upload file to directory php

Closely Related Answers

php file upload to server folder

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.