Restricting uploads to zip

@aatwoJan 07.2007

Can someone please fill the gap in this condition to ensure that users are only able to upload .zip files via my script? I could only find solutions for uploading images.

[code] if ($_FILES[“file”][“size”] < 3145728 && $_FILES[“file”][“type”]== _________){

my code

}

Thanks 🙂 [/code]

to post a comment

PHP

20 Comments(s) _↴

@aatwoauthorJan 07.2007 — #Edit: I made a mistake. The operator should be == rather than != which may have confused people.

@NightShift58Jan 07.2007 — #This is a useful reference in case you want to expand your list to other compressed files: http://www.webmaster-toolkit.com/mime-types.shtml

The answer to your specific question would be: "application/x-zip-compressed".

@aatwoauthorJan 07.2007 — #Thanks very much for that list.

Do you know why .rar is not on it?

Also do you know why some file extensions are mentions several times (.zip is mentioned on the list 4 times).

?

@NightShift58Jan 08.2007 — #.zip application/x-compressed

.zip application/x-zip-compressed

.zip application/zip

.zip multipart/x-zip

It's a good question... I can only guess that over time, there has been a need to differentiate between one and the other, i.e. open WinZip automatically as opposed to just downloading the file. But don't quote me...

This is the official MIME site, but you better sit down first...

http://www.iana.org/assignments/media-types/

@aatwoauthorJan 08.2007 — #Do you have any idea why this is not working? It's not allowing through any files now.

<i>
 </i>if ($_FILE["file"]["type"]=="application/x-zip-compressed" || $_FILE["file"]["type"]=="application/x-compressed" || $_FILE["file"]["type"]=="application/zip" || $_FILE["file"]["type"]=="multipart/x-zip"){
 
 my code
 
 }

@NightShift58Jan 08.2007 — #Put[code=php]echo $_FILE["file"]["type"];[/code]right before the [b]IF[/b] and upload a .ZIP... It'll tell you why...

@aatwoauthorJan 08.2007 — #echo $_FILE["file"]["type"] has no value.

It echos out nothing. What does that mean?!

@NightShift58Jan 08.2007 — #You may not have a file...

Try:

[code=php]print "<hr>";
 print_r($_FILE);
 print"</pre>";[/code]

in place of ECHO.

@aatwoauthorJan 08.2007 — #Using that method or the echo method, irregardless of what type of file I upload the output is always blank (except for the horizontal rule of course). I'm very confused. The file type must contain a value :s

@NightShift58Jan 08.2007 — #It was a typing mistake. Should've been this:

[code=php]print "<pre>";
 print_r($_FILE);
 print"</pre>[/code]

Can you post the output?

@NightShift58Jan 08.2007 — #Sorry... blew it again...

[code=php]print "<pre>";
 print_r($_FILES);
 print"</pre>";[/code]

This time, missed the "S" in $_FILES.

@bokehJan 08.2007 — #[CODE]$_FILE[B][color=red]S[/color][/B][/CODE]

By the way this test proves nothing as it is user controllable data.

@aatwoauthorJan 08.2007 — #Edit: Ahh ok sorry here it is.

Array

(

[file] => Array

(

[name] => timetable.zip

[type] => application/x-zip-compressed

[tmp_name] => C:PHPuploadtempphp3149.tmp

[error] => 0

[size] => 34819

)

)

@NightShift58Jan 08.2007 — #Please change:[code=php]print_r($_FILE);[/code]to:[code=php]print_r($_FILES);[/code]

@aatwoauthorJan 08.2007 — #Done and edited above. But to save you moving your eyes all the way up there here it is again.

<i>
 </i>Array
 (
 [file] =&gt; Array
 (
 [name] =&gt; timetable.zip
 [type] =&gt; application/x-zip-compressed
 [tmp_name] =&gt; C:PHPuploadtempphp3149.tmp
 [error] =&gt; 0
 [size] =&gt; 34819
 )
 
 )

@NightShift58Jan 08.2007 — #Your array needs to be called [B]$_FILES[/B] and not [B]$_FILE[/B] ... throughout your code.

@aatwoauthorJan 08.2007 — #I just noticed that after you corrected yourself. Thanks alot. I'll go re-test it and come back with hugs and kisses if it works ?

@NightShift58Jan 08.2007 — #I'm referring to this:

[code=php]if ($_FILE["file"]["type"]=="application/x-zip-compressed" || $_FILE["file"]["type"]=="application/x-compressed" || 
 $_FILE["file"]["type"]=="application/zip" || $_FILE["file"]["type"]=="multipart/x-zip"){[/code]

@aatwoauthorJan 08.2007 — #*Hugs and kisses*

Thanks a lot. This stuff is tough considering I started learning PHP this morning -_-

@NightShift58Jan 08.2007 — #Don't know about hugs and kisses ? but you're welcome...

Also in #PHP _↴

Session Problem Waiting in loops?Constructor Arguments in Child Class Problem

Success!

Help @aatwo spread the word by sharing this article on Twitter...

Tweet This

Restricting uploads to zip

20 Comments(s) _↴

Also in #PHP _↴

Success!

Social

Version

Restricting uploads to zip

20 Comments(s) ↴

Also in #PHP ↴

Success!

The web is an endless sea of information. Don't miss the boat... Subscribe!

Social

Version

20 Comments(s) _↴

Also in #PHP _↴