Menu
Community /Pin to ProfileBookmark
@NogDogSep 23.2009 — #Inconsistent variable name: [B]$filename[/B] and [B]$fileName[/B] (it's case-sensitive).@NogDogSep 23.2009 — #Works OK for me. If it's not working for you, you might want to var_dump($_FILES) and see if the name is really what you think it is.
check file extension
I’m not very good with PHP,
trying to add a little validation to my formmail script to only allow certain file extensions to be uploaded, using the script below, but even when uploading a file type thats on the whitelist, its executing the echo, can anyone tell me why?
[CODE]$filename = strtolower($_FILES[‘uploadfile’][‘name’]);
$whitelist = array(‘jpg’, ‘png’, ‘gif’, ‘jpeg’); #example of white list
if(!in_array(end(explode(‘.’, $fileName)), $whitelist))
{
echo ‘Invalid file type, image must be a JPG, PNG, GIF, or JPEG image!’;
exit(0);
}
Sign in
to post a comment6 Comments(s) ↴
0
@NogDogSep 23.2009 — #Inconsistent variable name: [B]$filename[/B] and [B]$fileName[/B] (it's case-sensitive).0
@NogDogSep 23.2009 — #Works OK for me. If it's not working for you, you might want to var_dump($_FILES) and see if the name is really what you think it is.[code=php]<?php
// test data:
$_FILES['uploadfile']['name'] = 'foo.jpag';
$filename = strtolower($_FILES['uploadfile']['name']);
$whitelist = array('jpg', 'png', 'gif', 'jpeg');
$q = explode('.',$filename);
if (!in_array(trim(strtolower(end($q))),$whitelist))
{
echo 'Invalid file type, image must be a JPG, PNG, GIF, or JPEG image!';
// debug:
echo "<pre>";var_dump($_FILES);echo "</pre>";
// end debug
exit(0);
}
else
{
echo "OK";
}
[/code]