By: atanok

atanok — Tue, 13 Oct 2009 19:01:16 +0000

Abhijeet Pathak, yeah, because client side size checks are *totally* not going to be bypassed, right?

Keep doing server-side checks, client-side is there to avoid unintentional mistakes.

By: avinash lakhan

avinash lakhan — Mon, 07 Jul 2008 06:42:34 +0000

$allowed_ext = “jpg, JPG, gif, GIF, png, PNG, jpeg, JPEG, bmp, BMP”;
$extension = pathinfo($_FILES['image_name']['name']);
if($extension['filename']){
$extension = $extension[extension];
$allowed_paths = explode(“, “, $allowed_ext);
$cnt=count($allowed_paths);
for($i = 0; $i $max_size) {
$error[]=”File Size is too Big!”;
}
// Check Height & Width
if ($max_width && $max_height) {
list($width, $height, $type, $w) = getimagesize($_FILES['image_name']['tmp_name']);
if($width > $max_width || $height > $max_height) {
$error[]=”File Height and/or Width are too Big!”;
}
}
}else {
if($extension) {
$error[]=”.$extension is not a proper extension!”;
}else $error[]=”Select File to Upload”;
}
}else {
if(empty($action)) {
//$error[]=”Select Product File to Upload”;
$new_error=false;
}
}
if($new_error){
$error[]=’* All Fields are Mandetory’;
}

if(error){
if($error) return $error=implode(”,$error);
}

By: Abhijeet Pathak

Abhijeet Pathak — Sat, 24 May 2008 04:17:36 +0000

Hey, good article, i didn’t know about MAX_FILE_SIZE.. I always thought that we have to check file size at the server side, suddenly life has became so much easier..

Comments on: PHP File Upload

By: atanok

By: avinash lakhan

By: Abhijeet Pathak