Greetings !
i hope someone can give me some insights as to what upload method to use of these and if any comparison
I found that :
if (isset($_FILES['userfile'])) {
works for me in some applications where:
if(isset($_POST['submit']))
does not
How secure is the first method ?
Thank you very much in advance !
9 2103 pbmods 5,821
Recognized Expert Expert
Changed thread title to better match contents.
Motoma 3,237
Recognized Expert Specialist
Greetings !
i hope someone can give me some insights as to what upload method to use of these and if any comparison
I found that :
if (isset($_FILES['userfile'])) {
works for me in some applications where:
if(isset($_POST['submit']))
does not
How secure is the first method ?
Thank you very much in advance !
I think that will only work when a file has been uploaded. I think the only reason why the second one will not work is because you have titled the submit button differently. Remember, the POST array is case sensitive!
Well,if(isset($ _POST['submit']) DOES work
but if(isset($_POST['submit']) && $_FILES['userfile']['size'] > 0) {
does not work for me in conjunction with:
if ($_FILES['userfile']['error'] == UPLOAD_ERR_OK) {
Motoma 3,237
Recognized Expert Specialist
I don't know what you are looking for. Perhaps you could carefully word a question that accurately expresses the difficulties you are having as well as alludes to what you need for information from me. It also helps if you post the relevant segments of code, and delineate what is happening, what isn't happening, and what you want to happen.
-
<?php
-
if(isset($_POST['submit']) && $_FILES['userfile']['size'] > 0)
-
if ($_FILES['userfile']['error'] == UPLOAD_ERR_OK) {
-
$tmpName = $_FILES['userfile']['tmp_name'];
-
$fileName = $_FILES['userfile']['name'];
-
$uploaddir = 'uploads/';
-
$uploadfile = $uploaddir.basename($_FILES['userfile']['name']);
-
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
-
echo 'File Uploaded!';
-
}
-
else {
-
echo 'Upload failed.';
-
}
-
}
-
elseif ($_FILES['userfile']['error'] == UPLOAD_ERR_FORM_SIZE) {
-
echo 'File exceeds allowed upload file size.';
-
}
-
?>
-
---corretly set Form here----
-
if(isset($_POST['submit']) && $_FILES['userfile']['size'] > 0) does not work but
-
-
if (isset($_FILES['userfile'])) { does
-
if(isset($_POST['submit'])) { alone also work
the submit button is named submit
Motoma 3,237
Recognized Expert Specialist
Do a print_r on your FILES array and see what the size is showing.
Thank you Motoma for taking the time to look at it
I'll try your suggestion,seem s the right direction. I just want the :
&& $_FILES['userfile']['size'] > 0) part to ensure no 0 byte file is uploaded(for security reasons) instead of inserting another if/else statement.
Motoma 3,237
Recognized Expert Specialist
Thank you Motoma for taking the time to look at it
I'll try your suggestion,seem s the right direction. I just want the :
&& $_FILES['userfile']['size'] > 0) part to ensure no 0 byte file is uploaded(for security reasons) instead of inserting another if/else statement.
Anytime. Post back and let me know if that gave any insight into the problem.
Sign in to post your reply or Sign up for a free account.
Similar topics |
by: mrbog |
last post by:
All I did was recompile my PHP 4.3.4 with the included GD and now my
$_FILES is perpetually empty. My php app is identical, I haven't
changed it at all since recompiling. I tried recompiling again
without GD to fix the problem, to go back to what I had before, but
$_FILES is always empty. I can't imagine that I'm doing something so
out of the ordinary, and yet I'm unable to google for someone with the
same problem. I am running...
|
by: Ian.H |
last post by:
Hi all,
Uploading of files.. AFAIU from the manual, if a file is larger than the
size defined in the form or larger than upload_max_filesize in php.ini,
that _FILES should hold an INT error code.
The file upload system is working fine if the file is smaller than the
defined size, but if it's larger, then both the _POST and _FILES arrays
are completely empty:
|
by: Bob Bedford |
last post by:
I'm passing the code from $_POST to $_GET.
I've a page upload using $_FILES. when the page was in $_POST, it worked
fine, but now, in $_GET, the $_FILES is empty.
any idea ?
|
by: chris |
last post by:
Can someone else see immediately why this script:
<html>
<body>
<?php
error_reporting(~E_ALL);
print_r($_FILES);
print_r($_POST);
|
by: mpar612 |
last post by:
Hello,
I am a newbie to PHP, MySQL. I am trying to create a basic file upload
form. I want to get that working and then I want to integrate that
into a form that will rename the file and save it to a directory and
store the path to the file in the db, in addition to storing other text
from other fields in the form. Then I will get that path using PHP to
display the image file in a browser.
First things first, I'm having difficulty...
| |
by: uranuskid |
last post by:
Hey folks,
I was going to include a contact form on my website. Well, in the first place that seemed an easy thing to do with a form that prompts a PHP file validating the input vaiables and using it's mail () function to send the mail. However, as I got more into that topic I realized that one should be really concerned about the validation part to prevent spam abuse.
There are shiploads of 'mail scripts' available with each of them has...
|
by: wbsurfver |
last post by:
I'm trying to figure out why I can't upload a file in php.
I'm trying it locally on a windows XP machine running Apache 2.2 and
PHP 5.2.1.
That is I am running the browser/server on same machine to test with.
I also tried it on a remote linux server, though in that case I'm not
sure what the s
config settings where, except that it does have PHP and I get the same
results.
Are there any releevant apache settings ? I have not come...
|
by: skulkrinbait |
last post by:
I've a HTML form that allows a user to specify the location to upload
a file from:
<p><label for = 'file'>Upload Graphics : <input type='file'
name='imagefile' /></label></p>
I then want to check if the user entered something or not as this
isn't mandatory. Here's an excerpt of the relavent code:
if (isset($_POST))
|
by: Karl |
last post by:
Hello again.
I have a form for posting news articles.
Form one is the "register" form.
Then I go to the preview form were I can select edit or accept
If I select edit, I got the "edit form" and if I select accept, I
receive a message that say:
The news article "headline" are posted into the database.
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look !
Part I. Meaning of...
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
| |
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed.
This is as boiled down as I can make it.
Here is my compilation command:
g++-12 -std=c++20 -Wnarrowing bit_field.cpp
Here is the code in...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules.
He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms.
Adolph will...
|
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one.
At the time of converting from word file to html my equations which are in the word document file was convert into image.
Globals.ThisAddIn.Application.ActiveDocument.Select();...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
|
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
| |
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |