Uploading using POST method

[Bob Bedford]

Hi all,

I've to accept a file that is sent using a POST method.

The file will be sent using this URL:

http://username:pa**@www.mysite.com/upload.php

How can I retrieve the username and passord and rename the file ? Should I
use substring using the URI ? Pseudocode below is the best way to do so ?

<?php
$user = substr($_SERVER['REQUEST_URI'],pos('//'),pos(':'));
$pass = substr($_SERVER['REQUEST_URI'],pos(':'),pos(' @'));
$userid = select userid where user = $user and pass=$pass.
renamefile($_FI LES['userfile']['tmp_name'],$userid)
?>

Thanks for help.Bob

[ZeldorBlat]

On Nov 19, 10:10 am, "Bob Bedford" <b...@bedford.c omwrote:

Hi all,

I've to accept a file that is sent using a POST method.

The file will be sent using this URL:

http://username:[e-mail]/upload.php

How can I retrieve the username and passord and rename the file ? Should I
use substring using the URI ? Pseudocode below is the best way to do so ?

<?php
$user = substr($_SERVER['REQUEST_URI'],pos('//'),pos(':'));
$pass = substr($_SERVER['REQUEST_URI'],pos(':'),pos(' @'));
$userid = select userid where user = $user and pass=$pass.
renamefile($_FI LES['userfile']['tmp_name'],$userid)
?>

Thanks for help.Bob

The username will be in $_SERVER['PHP_AUTH_USER'] and the password
will be in $_SERVER['PHP_AUTH_PW'].

[Bob Bedford]

"ZeldorBlat " <ze********@gma il.coma écrit dans le message de news:
f8************* *************** **...legroup s.com...

On Nov 19, 10:10 am, "Bob Bedford" <b...@bedford.c omwrote:

>Hi all,

I've to accept a file that is sent using a POST method.

The file will be sent using this URL:

http://username:[e-mail]/upload.php

How can I retrieve the username and passord and rename the file ? Should
I
use substring using the URI ? Pseudocode below is the best way to do so ?

<?php
$user = substr($_SERVER['REQUEST_URI'],pos('//'),pos(':'));
$pass = substr($_SERVER['REQUEST_URI'],pos(':'),pos(' @'));
$userid = select userid where user = $user and pass=$pass.
renamefile($_F ILES['userfile']['tmp_name'],$userid)
?>

Thanks for help.Bob

The username will be in $_SERVER['PHP_AUTH_USER'] and the password
will be in $_SERVER['PHP_AUTH_PW'].

argh !!! too simple...

thanks for help.

Bob

[John Dunlop]

Bob Bedford:

http://username:pa**@www.mysite.com/upload.php

Passing secrets in URLs is unsafe, RFC3986 deprecates "user:passw ord"
in all URLs, and RFC2616 does not allow "user:password" .

--
Jock

[Bob Bedford]

"ZeldorBlat " <ze********@gma il.coma écrit dans le message de news:
f8************* *************** **...legroup s.com...

On Nov 19, 10:10 am, "Bob Bedford" <b...@bedford.c omwrote:

>Hi all,

I've to accept a file that is sent using a POST method.

The file will be sent using this URL:

http://username:[e-mail]/upload.php

How can I retrieve the username and passord and rename the file ? Should
I
use substring using the URI ? Pseudocode below is the best way to do so ?

<?php
$user = substr($_SERVER['REQUEST_URI'],pos('//'),pos(':'));
$pass = substr($_SERVER['REQUEST_URI'],pos(':'),pos(' @'));
$userid = select userid where user = $user and pass=$pass.
renamefile($_F ILES['userfile']['tmp_name'],$userid)
?>

Thanks for help.Bob

The username will be in $_SERVER['PHP_AUTH_USER'] and the password
will be in $_SERVER['PHP_AUTH_PW'].

In fact not soo easy...how to get the filename ?

In the case of a form, you get the control name for getting the file like
this:
$_FILES['formname']['tmp_name']

But since there is no form, what the name I've to put in place of 'formname'
?

[Tim Roberts]

"Bob Bedford" <bo*@bedford.co mwrote:

>>>
I've to accept a file that is sent using a POST method.

The file will be sent using this URL:

http://username:[e-mail]/upload.php

...
In fact not soo easy...how to get the filename ?

In the case of a form, you get the control name for getting the file like
this:
$_FILES['formname']['tmp_name']

But since there is no form, what the name I've to put in place of 'formname'
?

If you plan to upload a file using a POST request, then your POST request
has to SIMULATE a form. The POST data will include the file's data as a
named field, just like a form would.

Only you know the name of the field, of course.
--
Tim Roberts, ti**@probo.com
Providenza & Boekelheide, Inc.