PHP Basic Tutorials ,PHP Sources Code,PHP Online Example

Algorithms Arrays Passwords Uncategorized
Commerce Uncategorized
Databases Abstraction Layers Informix LDAP MS SQL MySQL ODBC PostgreSQL Uncategorized
Date & Time Calculators Conversion Translation Uncategorized
Discussion Chat Forums Guestbooks Polls Uncategorized
Email Validation Uncategorized
External Uncategorized
Files and Directories Uncategorized
Games Uncategorized
Graphics 3-D Graphs Resizing Thumbnails Uncategorized
HTML Forms Menus & Navigation Source Viewers Tables Templates Uncategorized
HTTP Authentication Cookies File Uploading Uncategorized
I18N Uncategorized
Math Uncategorized
Miscellaneous Uncategorized
Searching and Trees Uncategorized
Security Uncategorized
Text Uncategorized
Utilities Calendars Counters Link Checkers Weather Uncategorized
XML Uncategorized

php sample source codes
A simple file upload class. <?php /* * Topic: File uploading class * Author: urs@circle.ch * Modified: 14-8-2000 * */ // -------------------------------------------------------------------------------------------- // look & feel // -------------------------------------------------------------------------------------------- function myHeader(){ ?> <HTML> <HEAD> <TITLE>PHP - file upload</TITLE> <style type="text/css"> <!-- body { font-family: Arial, Helvetica, sans-serif; font-size: 10pt } --> </style> </HEAD> <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#0000FF" VLINK="#800080"> <CENTER> <?php } function myFooter(){ ?> </CENTER> </BODY> </HTML> <?php } // -------------------------------------------------------------------------------------------- // upload class // -------------------------------------------------------------------------------------------- class upload { function myReport() { global $PHP_SELF, $userfile, $userfile_name, $newname, $userfile_size, $userfile_type, $dest_path; ?> <TABLE> <TR><TD><b>upload report</b> <TR><TD>upload tmp file:</TD><TD><?php echo $userfile; ?></TD> <TR><TD>file name:</TD><TD><?php echo $userfile_name; ?></TD> <TR><TD>target file name:</TD><TD><?php echo $newname; ?></TD> <TR><TD>target directory:</TD><TD><?php echo $dest_path; ?></TD> <TR><TD>file size:</TD><TD><?php echo $userfile_size; ?></TD> <TR><TD>file type:</TD><TD><?php echo $userfile_type; ?></TD> <TR><TD>  <TR><TD><a href="<?php echo basename($PHP_SELF); ?>">upload again</a></TD> </TABLE> <?php } function myForm() { global $PHP_SELF, $dest_path, $dest_file, $userfile; $read_only = "yes"; // do not let others to change the target filename $dest_path = "c:\\tmp\\"; // target file destination path $dest_file = "test.csv"; // target file name $file_size = "100000"; // upload size limit ?> <TABLE> <FORM ENCTYPE="multipart/form-data" ACTION="<?php echo basename($PHP_SELF); ?>" METHOD=POST> <INPUT TYPE="hidden" name="go" value="1"> <INPUT TYPE="hidden" name="dest_path" value="<?php echo $dest_path; ?>"> <INPUT TYPE="hidden" name="MAX_FILE_SIZE" value="<?php echo $file_size; ?>"> <TR> <TD><b>file upload</b></TD> <TD></TD> <TR> <TD>file:</TD> <TD><INPUT TYPE="File" name="userfile" size="30" maxlength="255"></TD> <TR> <TD>target filename:</TD> <TD><INPUT TYPE="Text" name="newname" size="30" maxlength="255" value="<?php echo $dest_file; ?>" <?php echo($read_only == "yes" ? 'READONLY' : ''); ?> ></TD> <TR> <TD>upload diretory:</TD> <TD><?php echo $dest_path; ?></TD> <TR> <TD colspan="2" align="CENTER"><INPUT TYPE="submit" VALUE="upload"></TD> </FORM> </TABLE> <?php } function myUpload() { global $userfile, $newname, $dest_path; $upload_path = "c:\\host\\apache\\htdocs\\tmp\\"; if (!copy( $upload_path.basename($userfile), $dest_path.$newname)) echo "failed to copy file<br>\n"; } } // -------------------------------------------------------------------------------------------- // main // -------------------------------------------------------------------------------------------- $this = new upload; switch ($HTTP_POST_VARS["go"]): case (1): $HTTP_POST_VARS["go"] = 0; myHeader(); $this-> myUpload(); $this-> myReport(); myFooter(); break; default: myHeader(); $this-> myForm(); myFooter(); endswitch; ?>
Upload remote file withour refreshing the page. Supports mutliple uploads. Can be embedded any where inside or outside a form/html page. AjaxFileUploader.inc.php <?php /** * This class uploads a file, without refreshing the page (Using Javascript) * * @author Rochak Chauhan * * @todo all the PHP 4.x users are requested to remove "PUBLIC", "PRIVATE" and "PROTECTED" keywords before the functions * / class AjaxFileuploader { // PHP 4.x users replace "PRIVATE" from the following lines with VAR private $uploadDirectory = ''; private $imageExtentions = array('.jpg', '.gif', '.jpeg', '.jpg', '.png', '.bmp'); private $soundExtentions = array('.wav', '.mp3', '.midi'); private $videoExtentions = array('.wmv', '.asf', '.avi'); /* * Constructor Function * / public function AjaxFileuploader($uploadDirectory) { if (trim($uploadDirectory) != '' && is_dir($uploadDirectory)) { $this->uploadDirectory = $uploadDirectory; } else { die("<b>ERROR:</b> Failed to open Directory: $uploadDirectory"); } } /* * @todo This function only scans in one level. you can modify this function to read from the subdirectries too * * This function return all the files in the upload directory, sorted according to their file types * * @return array / public function getAllUploadedFiles() { $returnArray = array(); $allFiles = $this->scanUploadedDirectory(); $returnArray['images'] = $this->returnUplodedImages($allFiles); $returnArray['sounds'] = $this->returnUplodedSounds($allFiles); $returnArray['videos'] = $this->returnUplodedVideos($allFiles); $returnArray['others'] = $this->returnMiscUplodedFiles($allFiles); return $returnArray; } /* * * This function scans uploaded directory and returns all the files in it * * @return array / private function scanUploadedDirectory() { $returnArray = array(); if ($handle = opendir($this->uploadDirectory)) { while (false !== ($file = readdir($handle))) { if (is_file($this->uploadDirectory."/".$file)) { $returnArray[] = $file; } } closedir($handle); } else { die("<b>ERROR: </b> Could not read directory: ". $this->uploadDirectory); } return $returnArray; } /* * This function returns all the uploaded image files * * @param array $allFiles * * @return array / private function returnUplodedImages($allFiles){ $returnArray = array(); foreach ($allFiles as $file) { $ext = substr($file, strrpos($file, '.')); if (in_array($ext, $this->imageExtentions)) { $returnArray[] = $file; } } return $returnArray; } /* * This function returns all the uploaded sounds * * @param array $allFiles * * @return array / private function returnUplodedSounds($allFiles){ $returnArray = array(); foreach ($allFiles as $file) { $ext = substr($file, strrpos($file, '.')); if (in_array($ext, $this->soundExtentions)) { $returnArray[] = $file; } } return $returnArray; } /* * This function returns all the uploaded videos * * @param array $allFiles * * @return array / private function returnUplodedVideos($allFiles){ $returnArray = array(); foreach ($allFiles as $file) { $ext = substr($file, strrpos($file, '.')); if (in_array($ext, $this->videoExtentions)) { $returnArray[] = $file; } } return $returnArray; } /* * This function returns all the misc files * * @param $allFiles * * @return array / private function returnMiscUplodedFiles($allFiles){ $returnArray = array(); foreach ($allFiles as $file) { $ext = substr($file, strrpos($file, '.')); if (!in_array($ext, $this->videoExtentions) && !in_array($ext, $this->imageExtentions) && !in_array($ext, $this->soundExtentions)) { $returnArray[] = $file; } } return $returnArray; } } ?> imageupload.php <?php /* * This file uploads a file in the back end, without refreshing the page * / define("MAX_SIZE_LIMIT", 10244096); // In bytes echo "<pre>"; print_r($_POST); print_r($_FILES); exit; if (isset($_GET['uploadFile']) && trim($_GET['uploadFile']) != '' && isset($_GET['destination']) && trim($_GET['destination']) != '') { $uploadFile = $_GET['uploadFile']; $destination = $_GET['destination']; $file = fstat(fopen($uploadFile, 'r')); if ($file['size'] > MAX_SIZE_LIMIT) { die("ERROR: File exceeds maximum file size of ".MAX_SIZE_LIMIT." bytes"); } $file = substr($uploadFile, (strrpos($uploadFile, DIRECTORY_SEPARATOR)+1)); if (copy($uploadFile, $destination.$file)) { echo "File uploaded Successfully"; } else { echo "Failed to uploaded file"; } } else { die("Illigal operation"); } ?> messge.php <?php /* * This file displays a message * */ if (isset($_GET)) { echo "<script> alert('".$_GET['id']."); </script>"; } else { echo "<script> Unauthorized access ! </script>"; } ?> uploader.js var http = createRequestObject(); function createRequestObject() { var obj; var browser = navigator.appName; if(browser == "Microsoft Internet Explorer"){ obj = new ActiveXObject("Microsoft.XMLHTTP"); } else{ obj = new XMLHttpRequest(); } return obj; } function startUpload(obj, destinationPath) { var fileName = obj.value; var param = fileName+'<=>'+destinationPath; http.open('post', 'imageupload.php'); http.setRequestHeader("Content-type", "application/x-www-form-urlencoded"); http.setRequestHeader("Content-length", param.length); http.setRequestHeader("Connection", "close"); http.onreadystatechange = handleResponse; http.send(param); } function handleResponse() { if(http.readyState == 4){ document.getElementById('message').innerHTML = http.responseText; //window.location.reload(true); } else { document.getElementById('message').innerHTML = "Please wait..."; } } function uploadFile() { document.getElementById('formName').submit(); }
An easy to configure and use script to upload files. With size control. <? /upload.php/ if ($img1_name != "") { if($img1_size > 20000) { echo "File size is bigger than 20kb!"; exit; } @copy("$img1", "/easyphp/www/$img1_name") or die("No copy!"); } else { die("No input file!"); } ?> <HTML> <HEAD> <TITLE>Uploaded</TITLE> </HEAD> <BODY> <P>File name<? echo "$img1_name"; ?>, <br> File Size <? echo "$img1_size"; ?> byte <br> File Type <? echo "$img1_type"; ?>.</P> </BODY> </HTML> <HTML> <HEAD> <TITLE>Upload example</TITLE> </HEAD> <BODY> <FORM METHOD="post" ACTION="do_upload1.php" ENCTYPE="multipart/form-data"> <p><strong>File</strong><br> <INPUT TYPE="file" NAME="img1" SIZE="30"></p> <P><INPUT TYPE="submit" NAME="submit" VALUE="Send"></p> </FORM> </BODY> </HTML>
This is a simple Upload form for your users. It allows the user to enter their name, and after the upload is successfull it will send you an email notice including, name, IP, Date and the file uploaded. It is also fully customizable with CSS. You will only need to change the email value, it is marked with a comment. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <!-- COPYRIGHT INFO, PlEASE READ BEFORE PROCEEDING WITH THE SOURCE CODE! This PHP Script/document created by Lou Dufrane.. http://www.dufranetech.com Please do not remover this copyright notice--> <title>File Uploads</title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <style type="text/css" media="all"> .box{ background: #eeeeee; font-size:10px; font-family:verdana; width: 500px; height:auto; padding:20px; border:1px solid #000; margin:0 auto;border-bottom:50px solid #000;} </style> </head> <body style=" margin:0 auto; background: #999999"> <div class="box"> <p><font color="#333333" size="7" face="Georgia, Times New Roman, Times, serif"> File Uploads</font> <br /> <font color="#003399" size="2" face="Verdana, Arial, Helvetica, sans-serif"> <strong>→ </strong> Thank you for using File Uploads..</font><br /> <br /> </font></p> <p> <?php $Time = date("H:i dS F"); $Mail = ("na@na.com"); #Edit this!! Place your email here.. if ($File) { print("<b>File Name</b>:<u> $File_name </u><p>\n"); print("<b>File Size</b>:<u> $File_size </u><p>\n"); if (copy ($File, "uploads/$File_name")){ print ("Thank You <b> $Name </b>! Your File was successfully uploaded & notification has been sent to the <b>Administrator</b>. <br> Would you like to upload another?<p>\n"); mail("$Mail", "Notice: File Upload", "IP: $REMOTE_ADDR - at $Time - $Name Uploaded $File_name to the Acplayers Directory <p> $Comment</p>\n"); print("<p><a href=\"uploads/$File_name\"> View your File Now </a></p>\n"); }else{ print ("Sorry $Name ! Your File was not uploaded. Please contect Administrator.<p>\n"); } unlink($File); } print("<Form action=\"fileupload.php\" METHOD=Post ENCTYPE=\"multipart/form-data\">\n"); print("Your Name<INPUT TYPE=TEXT NAME=\"Name\" Size=20> <br>\n"); print("Comment? <INPUT TYPE=TEXT NAME=\"Comment\" Size=20> <br>\n"); print("<p>File : <INPUT TYPE=FILE NAME=\"File\" Size=40> <br>\n"); print("<INPUT TYPE=SUBMIT NAME=\"submit\" VALUE=\"Upload\"></FORM>\n"); ?> </p> <p align="center"> <!-- You Must not remove this--> Script by <a href="http://lou.dufranetech.com">Lou dufrane</a><br /> <br /> </p> </div> </body> </html>
With the new HTML Form class you can design file upload forms very easy. There is a method for a single file and another for multiple files. <?php /* * topic: PEAR form class * file: HTML_Form_test.php * author: urs@circle.ch * modified: 22-9-2000 * * URL: http://cvs.php.net/viewcvs.cgi/php4/pear/HTML/ */ require ("Form.php"); $f = new HTML_Form(basename($PHP_SELF), 'POST', 'PEAR_form_class'); if($REQUEST_METHOD == "POST") { // here you will need to save the uploaded data echo "<table>"; echo "<tr><td>" . "<h2>Upload report</h2>"; echo "<tr><td>" . "Name:<td>Size:<td>Tmp:"; for($i=0; $i<count($anothername); $i++) { echo "<tr><td>" . $anothername_name[$i] . "<td>" . $anothername_size[$i] . "<td>" . $anothername[$i]; } echo "<tr><td>" . "<a href=" . basename($PHP_SELF) . ">restart</a>"; echo "<tr><td>" . " "; echo "<tr><td>" . "<a href=mailto:urs@circle.ch?subject=PEAR_Form_Class>urs@cirlce.ch, Sept. 2000</a>"; echo "</table>"; } else { if($mode == "single") { echo "<table>"; echo "<tr><td>" . "<h2>Single Fileupload Demo</h2>"; echo "<tr><td>" . "... nothing will really be uploaded here ;-)"; echo "<tr><td>" . $f->returnStart(1); echo "<tr><td>" . $f->returnFile('anothername[]', 50000, 20); echo "<tr><td>" . $f->returnReset('clear') . " " . $f->returnSubmit('send', 'submit'); echo "<tr><td>" . $f->returnHidden('rub', 1); echo "<tr><td>" . $f->returnEnd(); echo "<tr><td>" . "<a href=" . basename($PHP_SELF) . "?mode=>mulitiple files upload form</a>"; echo "<tr><td>" . " "; echo "<tr><td>" . "<a href=mailto:urs@circle.ch?subject=PEAR_Form_Class>urs@cirlce.ch, Sept. 2000</a>"; echo "</table>"; } else { echo "<table>"; echo "<tr><td>" . "<h2>Multiple Fileupload Demo</h2>"; echo "<tr><td>" . "... nothing will really be uploaded here ;-)"; echo "<tr><td>" . $f->returnStart(1); echo "<tr><td>" . $f->returnMultipleFiles('anothername[]', 50000, 3, 20); echo "<tr><td>" . $f->returnReset('clear') . " " . $f->returnSubmit('send', 'submit'); echo "<tr><td>" . $f->returnHidden('rub', 1); echo "<tr><td>" . $f->returnEnd(); echo "<tr><td>" . "<a href=" . basename($PHP_SELF) . "?mode=single>single file upload form</a>"; echo "<tr><td>" . " "; echo "<tr><td>" . "<a href=mailto:urs@circle.ch?subject=PEAR_Form_Class>urs@cirlce.ch, Sept. 2000</a>"; echo "</table>"; } } ?>
File uploading script, can be used on Unix/WIndows <? // ASP-style tags are okay in PHP 3.0.4 and above; some HTML editors recognize these tags // File Upload Script for PHP/3 for Windows // Released under the terms of the public GNU license // Based upon code written by Rasmus Lerdorf // Modified for Windows by Michael Grier // E-mail: bigmike@bigmweb.com // You need to write-enable a directory, named "upload", below the one you place this script in // On Windows NT, you can do this with a DOS program named CACLS // Directions for this can be found at "http://www.bigmweb.com/home/cacls.html" if($action1){ // if files have been uploaded, process them ?> <html> <head> <title>File Upload Results</title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> <p><font face="Arial, Helvetica, sans-serif"><font size="+1">File Upload Results</font><br><br> <? set_time_limit(60); // make reasonably sure the script does not time out on large files $path1 = dirname($PATH_TRANSLATED)."/upload/"; // assign our path in a form PHP for Windows understands $source = $file1; $source_name = $file1_name; if(($source <> "none")&&($source <> "")){ // see if the file exists; non-existing file has name of "none" if($error1 <> 1){ // no need to copy a file if directory not write-enabled $dest = $path1.$source_name; // append file name to our path if(copy($source,$dest)){ // copy the file from the temp directory to the upload directory, and test for success echo "$source has been uploaded<br>\n"; $imagesize = getimagesize($dest); switch($imagesize[2]) { case 0: echo "<br> Image is a unknown <br>"; unlink($dest); exit; case 1: echo "<br> Image is a GIF <br>"; echo "$dest has a width of $imagesize[0]<br>"; echo "$dest has a height of $imagesize[1]<br>"; $newname = $path1; $newname .=time() . ".gif"; if(copy($dest,$newname)) { echo "<br> GIF Rename Successful from $dest to $newname"; } else { echo "<br> GIF Rename Unsuccessful"; } unlink ($dest); break; case 2: echo "<br> Image is a JPG <br>"; echo "$dest has a width of $imagesize[0]<br>"; echo "$dest has a height of $imagesize[1]<br>"; $newname = $path1; $newname .=time() . ".jpg"; if(copy($dest,$newname)) { echo "<br> JPG Rename Successful from $dest to $newname"; } else { echo "<br> JPG Rename Unsuccessful"; } unlink ($dest); break; case 3: echo "<br> Image is a PNG <br>"; echo "$dest has a width of $imagesize[0]<br>"; echo "$dest has a height of $imagesize[1]<br>"; $newname = $path1; $newname .=time() . ".png"; if(copy($dest,$newname)) { echo "<br> PNG Rename Successful from $dest to $newname"; } else { echo "<br> PNG Rename Unsuccessful"; } unlink ($dest); break; } } else { echo "Upload directory not write-enabled\n"; // you need to write-enable the upload directory $error1 = 1; // set flag } } unlink($source); // delete the file from the temp directory } ?> <br><a href="upload.php3">Back</a> </font></p> </body> </html> <? } else { ?> <html> <head> <title>File Upload</title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> <p><font face="Arial, Helvetica, sans-serif"><font size="+1">File Upload</font><br><br> If your browser is upload-enabled, you will see "Browse" (Netscape, Internet Explorer) or ". . ." (Opera) buttons below. Use them to select file(s) to upload, then click the "Upload" button. After the files have been uploaded, you will see a results screen.<br> <form method="post" enctype="multipart/form-data" action="upload.php3"> <input type="hidden" name="MAX_FILE_SIZE" value="800000"> <input type="hidden" name="action1" value="1"> File 1: <input type="file" name="file1" size="30"><br> <br> <input type="submit" value="Upload"> </form> </font></p> </body> </html> <? } ?>
File Uploader with size restriction and file extension restriction Ok well you see, there are people who you just don't trust with FTP. So I came up with an easy file uploading script that restricts the size and file extensions of the file the user is uploading. I combined it with user login script, with admin control to add and delete users so if you ain't got the cookie the upload wont show but if you do itll show so use this small uploading script and add it to anything you want. <? $dir = ".././images"; // .. means back one folder and ./ is the current folder so its go back one and go to images/ $archive_dir = "$dir"; function upload_form() { global $PHP_SELF; ?> <form method="post" enctype="multipart/form-data" action="<? echo $PHP_SELF ?>"> <input type="hidden" name="action" value="upload"> Upload File! <input type="file" name="userfile"> <input typ="submit" name=SUBMIT value="upload"> </form> <? } function upload_file() { global $userfile, $userfile_name, $userfile_size, $userfile_type, $archive_dir, $WINDIR; if(isset($WINDIR)) $userfile = str_replace("\\\\","\\", $userfile); $filename = basename($userfile_name); if($userfile_size <= 0) die ("$filename is empty"); if($userfile_size >= 102400) die ("$filename is too large <br><br> <a href='./upload2.php'>Try Uploading Again</a>"); //102400 is 100k, so its bytes/1024 $ext = array('.jpg','.jpeg','.txt'); if(!in_array(strrchr($userfile_name,'.'),$ext)) die ("You cannot upload in that format"); if(!@copy($userfile, "$archive_dir/$filename")) die ("Can't copy $userfile_name to $filename."); if(isset($WINDIR) && !@unlink($userfile)) die ("Can't delete the file $userfile_name."); echo "$filename has been successfully uploaded.<br>"; echo "Filesize: " . number_format(($userfile_size)/1024) . "<Br>"; echo "Filetype: $userfile_type<br>"; echo "Fileurl: <a href='.././images/$filename'>http://SITEURL/images/$filename</a><br>"; echo "<br><a href='./upload3.php'>Upload Again?</a><br>"; } ?> <html> <head> </head> <body> <? if($action == 'upload') upload_file(); else upload_form(); ?> </body> </html>
File uploading based on one mime type and blocking all others. I used this script to only allow the uploading of pdf files. Please repale the directory names with your own. ###############This is the Upload form;#################### <html> <head> <title>Stats Digest Upload</title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> <form action="upload.php" enctype="multipart/form-data" method="post"> <input type="file" name="statfile"><br><br> <input type="submit" value="upload File"><br> </form> </body> </html> ############################################################ ############This is the upload script####################### <?php // this is the directory that the uploaded Statistics Digest will be kept in. $dirname = "statdigest"; //this is the full path of the Uploaded Statistic Digest define(PATH,"Path to Directoy"); //gets the filename and extension from the file input in the form $filename = $statfile_name; $accept_mtype = "application/pdf"; $m_type = $HTTP_POST_FILES['statfile']['type']; /Checks whether input file exists & checks to see whether the file is a pdf file. It only uploads PDF files / if (($filename !="") && ($m_type == "application/pdf" )) { //checks to see whether the upload directory exists, if not, creates it if (!$dir = @opendir(PATH.$dirname)) mkdir(PATH.$dirname,0700) or die ("Could not create directory"); //copy the uploaded file from the temporary dir to the statdigest dir. copy($statfile,PATH.$dirname."/".$statfile_name) or die ("Could not copy file"); unlink($statfile) or die ("Could not delete uploaded file"); echo "File Uploaded Successfully"; } elseif ($filename ==""){ echo "You must Select a File to upload"; } else { echo "You are only allowed to upload PDF files"; } ?> <html> <head> <title>Successful File Upload!!</title> <body> <P>You Sent: <? echo $_FILES['statfile']['name'] ?>, a <? echo $_FILES['statfile']['size'];?> byte file with a mime type of <? echo $m_type ?>.</p> </body> </html> ############################################################
Minimal File Upload to demonstrate it. See File Uploading entry for a fuller example. <HTML><BODY BGCOLOR=FFFFFF> <?php $uploadDir = './'; if (isset($submit)){ if ($upload != 'none'){ $dest = $uploadDir . $upload_name; if (@copy($upload, $dest)){ echo "Successfully uploaded $dest<BR>\n"; } else{ echo "<FONT COLOR=FF0000><B>File Upload Failed</B></FONT><BR>\n"; $perms = @fileperms($uploadDir); $owner = @fileowner($uploadDir); if (!$perms){ echo "Directory does not exist: $uploadDir<BR>\n"; } else{ $myuid = getmyuid(); if (!($perms & 2) && !(($owner == $myuid) && ($perms & 128))){ echo get_current_user(), " doesn't have permission to write in $uploadDir<BR>\n"; } } } } else{ echo "<FONT COLOR=FF0000><B>File Upload Failed</B></FONT><BR>\n"; echo "Filesize exceeds limit in FORM or php.ini<BR>\n"; } } ?> <FORM ENCTYPE=multipart/form-data ACTION=fileupload.php METHOD=POST> <INPUT TYPE=HIDDEN NAME=MAX_FILE_SIZE VALUE=10000> Upload File: <INPUT NAME=upload TYPE=FILE><BR> <INPUT TYPE=SUBMIT NAME=submit VALUE="Upload"> </FORM> </BODY></HTML>
This is a very simple, working example of a file upload. I provide the php code to handle an arbitrary number of file uploads, and example html code. > HTML code: > ----------- > <FORM ENCTYPE="multipart/form-data" ACTION="submit.php" METHOD=POST> > > <input type=file name=files[] size=20> > > <input type=submit value="Upload File"> > > </FORM> > > submit.php: > ----------- > <?php > > $path_to_file = // enter the directory you want file uploaded to here > > // file upload code > // it expects the inputs of type file to be named 'files[]' > // it will work with an arbitrarily large number of files > $files = $HTTP_POST_FILES['files']; > if (!ereg("/$", $path_to_file)) > $path_to_file = $path_to_file."/"; > foreach ($files['name'] as $key=>$name) { > if ($files['size'][$key]) { > // clean up file name > $name = ereg_replace("[^a-z0-9._]", "", > str_replace(" ", "_", > str_replace("%20", "_", strtolower($name) > ) > ) > ); > $location = $path_to_file.$name; > while (file_exists($location)) > $location .= ".copy"; > copy($files['tmp_name'][$key],$location); > unlink($files['tmp_name'][$key]); > // $content .= "Uploaded File: ".$location."\n"; > $thanks .= "\n<br>Successfully uploaded file: $name."; > } > } > print "<h1>File Submission</h1>\n"; > print $thanks; > > ?>
With this script you can easily control: 1. What extentions can be uploaded. 2. the size of the file 3. (only applies to images) Set a max or min. height and width 4.Change the name of the file to what you want. (i.e. username) 5. Change the extention of the file.(you may wish to do this for security reasons say you allow .php files to be uploaded, you could turn evil.php into evil.nullified) <?PHP /**************************************************** This script was written by: Timothy Martens Use this script all you want, all I ask is you leave this header intact ThePHPGuy.net ***************************************************/ ?> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Untitled Document</title> </head> <body> <center> If you do not see a "Browse" button you must be <br /> using an older browser that does not support the upload function.<br /> to get a updated browser FREE go to www.mozilla.com <br /> <br /> <br /> <form action="<?php echo $_SERVER ['PHP_SELF']; ?>" method="post" ENCTYPE="multipart/form-data"> File:<input type="file" name="userfile" size="30"> <input type="submit" value="Upload" name="submit" > </form> <?php // See if the form has been submitted! if (!isset($_POST['submit'])){/ Do nothing until the form is submited /} // // form submitted // else { // Let's roll /******************** * * * Config * * * ********************/ $newfilename = substr(md5(time()),0,10); // This creates a semi random code for the file name. Change to whatever you want just note that two files with the same name will be ovewritten $uploadpath = "./fresno/cmartens/bob"; // Directorie to upload files to. NOTE: Dir May need to be Chmoded 0777 But as that could be dangerous try 0766 first \| you can find a chmod calculator @ http://www.thephpguy.net/tools/chmod.php $good_extensions = "jpg\|gif\|png"; // Good extentions!!! Do not put extensions such as .swf or .zip in here if you gave them execute permission to the dir. $max_size = "500000000"; // Max size of file in bytes $max_height = ""; // Max height in pixels \|\| Leave blank for no max height $max_width = ""; // Max width in pixels \|\| Leave blank for no max width $min_height = ""; // Leave blank for no min height $min_width = "";// Leave blank for no min width /////////////////////////////////////////////////////// // See if the $uploadpath exists if(is_dir($uploadpath)){} else {/ mkdir("$uploadpath", 0766); only use this if you only have one dir in the $uploadpath */ echo "upload path dir does not exsist"; exit; } $extension_path = pathinfo($_FILES['userfile']['name']); $extension = $extension_path[extension]; $explode_extensions = explode("\|", $good_extensions); for($i = 0; $i < count($explode_extensions); $i++) { if ($explode_extensions[$i] == "$extension") {$ext_good = "1";} } echo "<br>The extension is $extension<br>"; ///////////////////////////////////////////////////// // Check File Size if ($ext_good == "1") { if($_FILES['userfile']['size'] > $max_size) { echo "File size is too big!"; exit; } // Check Height & Width if ($max_width == "" && $max_height == "") {} else{ if ($max_width && $max_height) { list($width, $height, $type, $w) = getimagesize($_FILES['userfile']['tmp_name']); if($width > $max_width){ echo "The file width is too large!<br><br>The images max width is $max_width pixels"; // To Wide exit;} if ($height > $max_height){ echo "The file height is too large!<br><br>The images max height is $max_height pixels";// To Tall exit;} } // end else } // end if if($width < $min_width){ echo "The file width is too small!<br><br>The images min width is $min_width pixels"; // Not wide enough exit;} if ($height < $min_height){ echo "The file height is too small!<br><br>The images min height is $min_height pixels";// To short exit;} // The Upload Part if(is_uploaded_file($_FILES['userfile']['tmp_name'])) { move_uploaded_file($_FILES['userfile']['tmp_name'],$uploadpath.'/'."$newfilename"."."."$extension") or die("Sorry some error occured we were not able to upload the file.");// renames file to user ID + . + OriginalExtention } print "Your Picture has been successfully uploaded."; } // End if "file is '$ext_good'" else { print "Sorry incorrect file extension! <br><br><br>Try a jpg or a gif =)"; } } //end of 'if submit' ?> </center> </body> </html>
Upload script that can handle multiple uploads with file checking. After uploadprocessing all variables are submitted to another script for further processing (e.g. database) <?php // ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: \\ // :: :: \\ // :: UPLOAD :: \\ // :: Processes uploaded files and shows a short summary. :: \\ // :: :: \\ // :: :: \\ // :: Files are placed in the UPLOADPATH directory (which defaults to the directory this uploadscript :: \\ // :: is in. :: \\ // :: After processing of the files other form inputs are passed on to the referring script unless :: \\ // :: the SUBMITTO variable is set. :: \\ // :: :: \\ // :: Files with extensions in $aForbiddenExt are not allowed (you may change this array to your :: \\ // :: needs). Other filerestrictions (such as filesize or type) are handled from the uploadform. :: \\ // :: :: \\ // :: Global options for the upload can be set by placing the appropriate options in hidden inputs. :: \\ // :: File options must be set as inputs with name 'inputname_OPTION'. For a list of available :: \\ // :: options see below. :: \\ // :: If a file doesn't meet the criteria it is declined. :: \\ // :: Files are renamed to a semi-unique name (number of seconds since the epoch + a countervalue), :: \\ // :: unless the configuration option '_NONUNIQUE' is used for the fileinput. For these files only :: \\ // :: some of the character are replaced to avoid problems with certain browsers (such as spaces :: \\ // :: in filenames) :: \\ // :: :: \\ // :: Options for file-inputs: :: \\ // :: - _MAXSIZE : maximum size of the file :: \\ // :: - _FILETYPE : comma-separated list of all allowed filetypes :: \\ // :: - _NOUNIQUE : if 'true' the file won't be renamed to semi-unique value (standard is false) :: \\ // :: - _IMGWMAX : image width (maximum) :: \\ // :: - _IMGHMAX : image height (maximum) :: \\ // :: - _IMGW : image width (absolute) :: \\ // :: - _IMGH : image height (absolute) :: \\ // :: :: \\ // :: Global configuration options: :: \\ // :: - UPLOADPATH : path where uploaded files are moved to :: \\ // :: - MAXSIZE : maximum size of total upload :: \\ // :: - FILETYPE : comma-separated list of all allowed filetypes (total download) :: \\ // :: - SUBMITTO : script to use after the upload is processed :: \\ // :: :: \\ // ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: \\ $bUpload = true; $aMessages = array( "<tr><td valign='top' colspan='2'>upload exceeds maximum of %s bytes.</td></tr>" ,"- file error.<br />" ,"- filesize exceeds maximum of %s bytes.<br />" ,"- filetype not allowed.<br />" ,"- image exceeds max width of %s px.<br />" ,"- image exceeds max height of %s px.<br />" ,"- image width is not %s px.<br />" ,"- image height is not %s px.<br />" ); $aImageExt = array("jpg", "jpeg", "gif", "png"); $aForbiddenExt = array("php", "so", "phtml", "shtml", "html", "htm", "js", "pl", "cgi", "vbs"); $sMsg = ""; $sFileNameInputs = ""; // upload path instellen if ($_POST["UPLOADPATH"] != "") { $UPLOADPATH = $_SERVER["DOCUMENT_ROOT"]; $UPLOADPATH .= $_POST["UPLOADPATH"]; if (substr($UPLOADPATH, -1) != "/") $UPLOADPATH .= "/"; } if (!is_dir($UPLOADPATH)) { $UPLOADPATH = $_SERVER["SCRIPT_FILENAME"]; $UPLOADPATH = substr($UPLOADPATH, 0, strrpos($UPLOADPATH, "/")+1); } // determine whether maximum upload size is reached if ($bUpload && $_POST["MAXSIZE"] != "" && is_numeric($_POST["MAXSIZE"])) { $iMaxSize = (integer) $_POST["MAXSIZE"]; $iCurSize = 0; foreach($_FILES as $key=>$value) $iCurSize += $_FILES[$key]['size']; if ($iCurSize > $iMaxSize) { $bUpload = false; $sMsg .= sprintf($aMessages[0], $iMaxSize); } } // determine whether files meet there criteria if ($bUpload) { $iCounter = 0; foreach($_FILES as $key=>$value) { $_FILES[$key]['msg'] = ""; if (is_uploaded_file($$key)) { // file-extension $sExt = substr(strrchr($_FILES[$key]['name'], "."), 1); if (in_array($sExt, $aForbiddenExt)) { $_FILES[$key]['msg'] = $aMessages[1]; } else { // check filesize if ($_POST[$key."_MAXSIZE"] && is_numeric($_POST[$key."_MAXSIZE"])) { $iFileSize = (integer) $_FILES[$key]['size']; $iMaxSize = (integer) $_POST[$key."_MAXSIZE"]; if ($iFileSize > $iMaxSize) $_FILES[$key]['msg'] .= sprintf($aMessages[2], $iMaxSize); } // check filetype if ($_POST["FILETYPE"] != "") $aFileTypes = explode(",", $_POST["FILETYPE"]); else if ($_POST[$key."_FILETYPE"] != "") $aFileTypes = explode(",", $_POST[$key."_FILETYPE"]); else $aFileTypes = 0; if (is_array($aFileTypes) && !in_array($sExt, $aFileTypes)) $_FILES[$key]['msg'] .= $aMessages[3]; // for images check their sizes if (in_array($sExt, $aImageExt)) { // image info $aImgInfo = getImageSize($$key); // width if ($_POST[$key."_IMGW"] != "" && is_numeric($_POST[$key."_IMGW"])) { $iImgAbsW = (integer) $_POST[$key."_IMGW"]; if ($aImgInfo[0] != $iImgAbsW) $_FILES[$key]['msg'] .= sprintf($aMessages[6], $iImgAbsW); } // height if ($_POST[$key."_IMGH"] != "" && is_numeric($_POST[$key."_IMGH"])) { $iImgAbsH = (integer) $_POST[$key."_IMGH"]; if ($aImgInfo[1] != $iImgAbsH) $_FILES[$key]['msg'] .= sprintf($aMessages[7], $iImgAbsH); } // max. width if ($_POST[$key."_IMGWMAX"] != "" && is_numeric($_POST[$key."_IMGWMAX"])) { $iImgMaxW = (integer) $_POST[$key."_IMGWMAX"]; if ($aImgInfo[0] > $iImgMaxW) $_FILES[$key]['msg'] .= sprintf($aMessages[4], $iImgMaxW); } // max. height if ($_POST[$key."_IMGHMAX"] != "" && is_numeric($_POST[$key."_IMGHMAX"])) { $iImgMaxH = (integer) $_POST[$key."_IMGHMAX"]; if ($aImgInfo[1] > $iImgMaxH) $_FILES[$key]['msg'] .= sprintf($aMessages[5], $iImgMaxH); } } } // file processing if ($_FILES[$key]['msg'] == "") { // rename file (disallowed chars) or rename to timestamp if ($_POST[$key . "_NOUNIQUE"] == "true") $sFilename = strtr($_FILES[$key]['name'], "',;` %#+", "________"); else $sFilename = time() . $iCounter++ . "." . $sExt; // move file if (@move_uploaded_file($$key, $UPLOADPATH . $sFilename)) { $_FILES[$key]['msg'] = "upload completed.<br />"; $sFileNameInputs .= "<textarea name='$key'>{$sFilename}</textarea>"; } else { $_FILES[$key]['msg'] = "move of file failed.<br />"; } } $sMsg .= sprintf("<tr><td valign='top'><b>%s</b></td><td valign='top'>%s</td></tr>" ,($_FILES[$key]['name'] ? $_FILES[$key]['name'] : $key) ,$_FILES[$key]['msg'] ); } } } // summary echo "<html><head><title>U P L O A D</title></head><body>"; echo "<table border='0' cellpadding='2' cellspacing='4'>"; echo "<tr><td><b>file</b></td><td> </td></tr>"; echo ($sMsg ? $sMsg : "<tr><td colspan=2>no files found</td></tr>"); echo "</table>"; // form if (!$_POST["SUBMITTO"]) { $iQuestionPos = strrpos($_SERVER['HTTP_REFERER'], "?"); $sReferer = substr($_SERVER['HTTP_REFERER'] ,0 ,($iQuestionPos ? $iQuestionPos : strlen($_SERVER['HTTP_REFERER']))); } else $sReferer = $_POST["SUBMITTO"]; if ($sReferer != "") { echo "<div style='visibility:hidden'>"; echo "<form action='", $sReferer, "?", $_SERVER['QUERY_STRING'], "' method='post'>"; echo $sFileNameInputs; foreach($_POST as $key=>$value) { if (get_magic_quotes_gpc()) $value = stripslashes($value); echo "<textarea name='", $key, "'>", $value, "</textarea>"; } echo "</form>"; echo "<script type='text/javascript'>setTimeout('document.forms[0].submit()',2000);</script>"; echo "</div>"; } else { echo "<p><b>unable to submit form values!</b></p>"; } echo "</body></html>"; ?>
This enhancement of <a href=http://www.zend.com/codex.php?id=612&single=1>Uploder</a>, I add a space quota restriction and file extension filtering. <? /******************************************************************** * file uploader - file uploader code snippet. * maxsize : * - you can set the maxsixe, if file size exceed maxsize it won't proceed; * - you can set the quota, if dir size exceed quota it won't proceed; * - you can set the ext, if file name extension listed on this array it won't proceed; * * Copyright (C) 2001 Wibisono Sastrodiwiryo. * This program is free software licensed under the * GNU General Public License (GPL). * * CyberGL => Application Service Provider * http://www.cybergl.co.id * office@cybergl.co.id * * $Id: uploader2.php3,v 0.2 2001/07/23 22:3:34 wibi Exp $ *********************************************************************/ $dir ="/www/servers/upload"; # your uploaded file dir, this dir require proper permission to write access $temp ="/tmp"; # unix system temp dir $maxsize ="40960"; # max 40 Kb $quota = 524288; # define space quota 500 Kb $ext = array(".p", ".php", ".php3", ".phtml", ".shtml"); # define file extension to reject if ($userfile AND $userfile != "none") { $total=0; $handle=opendir($dir); while ($file = readdir($handle)) { if (is_file("$dir/$file")) {$total+=filesize("$dir/$file");} } while (list($key,$val) = each($ext)) { if (strstr($userfile_name, $val)) {$invalidext=true;break;} } if ($userfile_size > $maxsize) {echo "ERR: File too large";} elseif ($invalidext) {echo "ERR: Forbiden file extension";} elseif ($total > $quota) {echo "ERR: Space quota exceeded";} else { rename("$userfile", "$temp/$userfile_name"); copy("$temp/$userfile_name", "$dir/$userfile_name"); unlink("$temp/$userfile_name"); echo "OK: File \"$userfile_name\" uploaded succesfully"; } } else { ?> <form action="<?echo $PHP_SELF?>" method=POST ENCTYPE="multipart/form-data"> <table> <tr> <td class=navbox>Select File:</td> <td>:</td> <td><input type=file name=userfile></td> </tr> <tr> <td class=navbox> </td> <td> </td> <td><input type=submit value=Upload></td> </tr> </table> </form> <?}?>

php.ComLanka.com PHP Tutorial ,PHP source code, PHP online example