Upload Form

Printable View

10-31-2007, 07:30 AM
pssparkman

Upload Form

Hello,

I have an upload form that doesn't want to work correctly for some reason. I am new at this and have searched and searched, and found nothing that can help fix what I need. It keep coming up with the file type is not allowed, and the file I am trying to submit is in the list of allowed types.

PHP Code:

<?php // Configuration - Your Options $allowed_filetypes = array('.jpg','.gif','.bmp','.png','.avi','.wmv',); // These will be the types of file that will pass the validation. $max_filesize = 1500000; // Maximum filesize in BYTES (currently 0.5MB). $upload_path = 'uploads/'; // The place the files will be uploaded to (currently a 'files' directory). $filename = $_FILES['userfile']['name']; // Get the name of the file (including file extension). $ext = substr($filename, strpos($filename,'.'), strlen($filename)-1); // Get the extension from the filename. // Check if the filetype is allowed, if not DIE and inform the user. if(!in_array($ext,$allowed_filetypes)) die('The file type you attempted to upload is not allowed.'); // Now check the filesize, if it is too large then DIE and inform the user. if(filesize($_FILES['userfile']['tmp_name']) > $max_filesize) die('The file you attempted to upload is too large.'); // Check if we can upload to the specified path, if not DIE and inform the user. if(!is_writable($upload_path)) die('You cannot upload to the specified directory.'); // Upload the file to your specified path. if(move_uploaded_file($_FILES['userfile']['tmp_name'],$upload_path . $filename)) echo 'Your file upload was successful, view the file <a href="' . $upload_path . $filename . '" title="Your File">here</a>'; // It worked. else echo 'There was an error during the file upload.'; // It failed :(. ?>
10-31-2007, 07:40 AM
Twey

Off-by-one error: you don't need to take away that one from strlen($filename). The first parameter of substr() doesn't include the actual character you specify, but the second does. It's kind of like instead of selecting a character, you're selecting the line between that character and the one before.
10-31-2007, 07:58 AM
pssparkman

Okay so do I remove the -1 or something else. Like I said before, I am new to this. If possible can you explain it better or show what it needs to look like?
10-31-2007, 11:40 AM
Twey

Yes, just remove the -1 and it should be fine.
10-31-2007, 01:38 PM
pssparkman

It still come up with the same error that the file is not allowed.
10-31-2007, 02:31 PM
Twey

Well, firstly you can just do:

Code:

$ext = substr($filename, strpos($filename,'.'));

Secondly, echo $ext; and see what it says.
10-31-2007, 02:37 PM
pssparkman

Quote:

Originally Posted by Twey

Well, firstly you can just do:

Code:

$ext = substr($filename, strpos($filename,'.'));

Secondly, echo $ext; and see what it says.

Where should I put the echo $ext;?
10-31-2007, 02:41 PM
Twey

Right after

Code:

$ext = substr($filename, strpos($filename,'.'));

is fine.
10-31-2007, 03:11 PM
pssparkman

I put it after what you said and it still came up with the message of file not accepted.
10-31-2007, 03:20 PM
Twey

I suspect $_FILES['userfile']['name'] is empty. Did the file get uploaded correctly? Is the file input element named "userfile"? Did you set the enctype correctly on the form? Are you using POST?
10-31-2007, 03:21 PM
boogyman

he's telling you how to troubleshoot it.
above the file cannot be accepted it should print out the contents.

Code:

<?php // Configuration - Your Options $allowed_filetypes = array('.jpg','.gif','.bmp','.png','.avi','.wmv',); // These will be the types of file that will pass the validation. $max_filesize = 1500000; // Maximum filesize in BYTES (currently 0.5MB). $upload_path = 'uploads/'; // The place the files will be uploaded to (currently a 'files' directory). $filename = $_FILES['userfile']['name']; // Get the name of the file (including file extension). $ext = substr($filename, strpos($filename,'.')); echo $ext;
10-31-2007, 04:46 PM
pssparkman

Well after some searching I found another upload script that works fine, just needs some tweaking to do what I need it to do but it works. On another note, how can I get the upload script to send out an email saying that something to the nature of

Quote:

The file "file" has been uploaded to "directory" on "date".

Any help with this will be appreciated.
11-01-2007, 06:32 PM
insanemonkey

this is what i use,

Code:

<?php error_reporting(E_ALL ^ E_NOTICE); // Show all major errors. // Check to see if the button has been pressed if (!empty($_REQUEST['sendForm'])) { // Assign the name to a variable $name = $_FILES['uploaded_file']['name']; // Assign the tmp_name to a variable $tmp_name = $_FILES['uploaded_file']['tmp_name']; // Assign the error to a variable $error = $_FILES['uploaded_file']['error']; // Assign the size to a variable $size = $_FILES['uploaded_file']['size']; // No trailing slash $uploadFilesTo = 'imgs'; // Create safe filename $name = ereg_replace('[^A-Za-z0-9.]', '-', $name); // Disallowed file extensions $naughtyFileExtension = array("php2", "php3", "php4", "php5", "asp", "inc", "txt", "wma", "mov", "js", "exe", "jsp", "map", "obj", " ", "", "html", "mp3", "mpu", "wav", "cur", "ani", "fla", "swf"); // Returns an array that includes the extension $fileInfo = pathinfo($name); // Check extension if (!in_array($fileInfo['extension'], $naughtyFileExtension)) { // Get filename $name = getNonExistingFilename($uploadFilesTo, $name); // Upload the file if (move_uploaded_file($tmp_name, $uploadFilesTo.'/'.$name)) { // Show success message echo '<center><a href="http://www.xudas.com/forum/imgupload/'.$uploadFilesTo.'/'.$name.'" target="_blank"> <img src="http://www.xudas.com/forum/imgupload/'.$uploadFilesTo.'/'.$name.'" align="top" width="100" border="0"></a> <textarea>http://www.xudas.com/forum/imgupload/'.$uploadFilesTo.'/'.$name.'</textarea></center>'; } else { // Show failure message echo '<center><SPAN style="color:gray">File failed to upload to /'.$name.'</span></center>'; } } else { // Bad File type echo '<center><SPAN style="color:gray">The file uses an extension we don\'t allow.</span></center>'; } } // Functions do not need to be inline with the rest of the code function getNonExistingFilename($uploadFilesTo, $name) { if (!file_exists($uploadFilesTo . '/' . $name)) return $name; return getNonExistingFilename($uploadFilesTo, rand(100, 200) . '_' . $name); } ?> <BR> <center> <table bgcolor="#000000" border="0" width="100%"> <tr><td> <form action="" method="post" enctype="multipart/form-data"> <input type="file" name="uploaded_file"> <input type="submit" name="sendForm" value="Upload"> </form> </td></tr> </table> </center>

this one you can actually not allow certain file types... have fun
11-01-2007, 06:35 PM
Twey

It's a lot safer to only allow certain file types (e.g. you missed out .phtml there).
11-01-2007, 06:44 PM
insanemonkey

OMg there is a phtml, what is the world coming to, why do they have so many html things, all they need is html and htm ok!!!

geesh...

thanks for telling me..

is there a way i could turn this upload into just allowing certain file types, instead of me typing in everyone i dont want...

I cant seem to figure it out.... help plz
11-01-2007, 06:47 PM
pssparkman

I do however want to put in the form a way that when an upload is successful an email goes out to a specified address (listed inside the form) that a file has been uploaded. How can I approach this?
11-01-2007, 07:00 PM
Twey

Quote:

is there a way i could turn this upload into just allowing certain file types, instead of me typing in everyone i dont want...

Just take away the ! before the in_array() call. You might want to rename $naughtyFileTypes for clarity.

Quote:

OMg there is a phtml, what is the world coming to, why do they have so many html things, all they need is html and htm ok!!!

It's actually a PHP extension.
11-01-2007, 07:14 PM
insanemonkey

oooh more php, what i would do is have it uploaded

post it as get method like
http://www.yourdomain.com/uploaded/index.php?upload=$file

then have a email box below allow users to put in their email address then(like a contact form) when the users submit it sends them
$file

eek sorry confusing a litle
11-01-2007, 07:31 PM
pssparkman

Sorry, maybe I didn't explain it enough. I want to specify an email address inside the code that when the upload is successful it send an email to that user that "file name" has been uploaded to "dir" on "date". I don't need the user to submit an address for the email to go to. The address is already coded within the form.
11-01-2007, 07:47 PM
insanemonkey

use something like this. you have to use session in a way to identify the user..

$to = "$useremail";

if($submit)
{
mail("$uploadedfile");

} else {
echo "There was an error please try again";
}
?>
try this for like a process page
11-01-2007, 08:29 PM
pssparkman

So where you have mail("$uploadedfile"), that is where the message would be? Thanks.
11-01-2007, 08:43 PM
insanemonkey

yes..

mail("$uploadfileurl");

uploadfileurl is what the url is whats going to be send to them..
so they know where the file is.
or message..
11-01-2007, 08:48 PM
pssparkman

Thank You. Now one last question and I hope I can be done with this. I don't know anything about php, but from what others have helped me with. How do I incorporate it within the form so that when a file is successful it send this email?
11-02-2007, 09:33 AM
insanemonkey

I would make a process.php page. or same page.. its really hard, and took me for ever to make my host script that kinda does the same thing..

uhmm.. idea? well after it process your gonna wanna put the mail process rght after the code..

I can't do it right now but I can try tomorrow... not really sure if I can even do it..
11-03-2007, 05:49 AM
pssparkman

Need some help, I have been trying to understand the order of what goes where to get it to function properly, is this correct. It gives me errors, of course.

PHP Code:

#-----------------------------------------------------------# # this function will upload the files. :) ;) cool # #-----------------------------------------------------------# if (move_uploaded_file($file_tmp,$upload_dir.$file_name)) { echo "File $i: ($file_name) has been uploaded successfully."; } $to = "pss_2002@hotmail.com"; if($submit) { mail("[I]Email Message[/I]") }else{ echo "File $i: Faild to upload."; }#end of (move_uploaded_file).

Not sure if I really need the if($submit)???
11-06-2007, 01:03 AM
pssparkman

Okay, after some looking around on the net, I have found an script that contained the necessary parts for sending out emails and it works! Now the problem, the email doesn't come to me with line breaks in it as I have put them in using <br>. Is there a specific way or another piece of code that I am missing or need to us? I need to also know how to create links and a bulleted list in the email as well as my attempts with html code inside the email have failed.
11-09-2007, 08:48 PM
pssparkman

I need help with getting this to work in an upload form. I get it to where I can see the two radio buttons, but when I click on one, it doesn't want to show the rest of the form.

The initial setting is $num_files = 0 at the very begging of the script, as you select a radio button is suppose to show you the that amount of forms either it be 1 or 3.

PHP Code:

echo " <input type=\"radio\" onclick= $num_files=3 name='1'> <input type=\"radio\" onclick= $num_files=1 name='1'> if ($num_files < 0){ echo " <form method=\"post\" action=\"$_SERVER[PHP_SELF]\" enctype=\"multipart/form-data\">"; // show the file input field based on($num_files). for ($i = 1; $i <= $num_files; $i++) { echo "File $i: <input type=\"file\" size=\"70\" name=\"file". $i ."\"><br><br>"; }
11-11-2007, 02:39 AM
pssparkman

Okay, I got it to where when I click on what I want the selection is shown, but the issue that I have now is that all the available selections are capable of being seen. How can I hide those selections or call their function.
11-20-2007, 04:03 PM
Shotgun Ninja

When you guys get this done, let me know. I never even knew that files could be POSTed via a form.
11-20-2007, 06:55 PM
pssparkman

Take a look at the following: FTP Upload Form
11-21-2007, 03:43 PM
Shotgun Ninja

Quote:

Originally Posted by pssparkman

Okay, after some looking around on the net, I have found an script that contained the necessary parts for sending out emails and it works! Now the problem, the email doesn't come to me with line breaks in it as I have put them in using <br>. Is there a specific way or another piece of code that I am missing or need to us? I need to also know how to create links and a bulleted list in the email as well as my attempts with html code inside the email have failed.

Use the wonderful function:

PHP Code:

$goodText = br2nl("badText");

It might help.
11-21-2007, 03:43 PM
Shotgun Ninja

*owned*
11-21-2007, 04:02 PM
boogyman

Quote:

Originally Posted by Shotgun Ninja

Use the wonderful function:

PHP Code:

$goodText = br2nl("badText");

It might help.

that is the abuse of the break-line tag.

anywhere he wants to have a new line insert the wildcard \n

Code:

$message = "This is \n some message.\n\t please refrain from doing that.";

would be displayed in the email as

Code:

This is some message. please refrain from doing that.
11-22-2007, 03:20 AM
Twey

Quote:

that is the abuse of the break-line tag.

It is. However, your proposed solution won't work since s/he evidently is sending HTML mail (also, \n is not a wildcard, it's an escape sequence: a wildcard is a character that matches a range of other characters, such as * in a DOS or bash). Instead, you need to wrap the offending text in a container with white-space: pre; like so:

Code:

$goodText = sprintf('<div style="white-space: pre;">%s</div>', $badText);