Using file functions to implement PHP file upload case analysis

Home

Backend Development

PHP Tutorial

Using file functions to implement PHP file upload case analysis_PHP tutorial

WBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWB

Jul 15, 2016 pm 01:26 PM

phpuploadWho are youfunctionuseaccomplishdocumentcase analysiscomputer

If you are a computer enthusiast and don’t know PHP, you are too behind the times. If you want to know the relevant knowledge of PHP, let’s take a look at the implementation of PHP file upload. This code is divided into two files, one is upload.html and the other is upload.php.

<ol class="dp-xml">
<li class="alt"><span><strong><font color="#006699"><span class="tag"><span class="tag-name">form</span></span></font></strong><span> </span><span class="attribute"><font color="#ff0000">enctype</font></span><span>=</span><span class="attribute-value"><font color="#0000ff">"multipart/form-data"</font></span><span> </span><span class="attribute"><font color="#ff0000">action</font></span><span>=</span><span class="attribute-value"><font color="#0000ff">"upload.php"</font></span><span> </span><span class="attribute"><font color="#ff0000">method</font></span><span>=</span><span class="attribute-value"><font color="#0000ff">"post"</font></span><span class="tag"><strong><font color="#006699">></font></strong></span><span> </span></span></li>
<li class="">
<span></span><strong><font color="#006699"><span class="tag"><span class="tag-name">input</span></span></font></strong><span> </span><span class="attribute"><font color="#ff0000">type</font></span><span>=</span><span class="attribute-value"><font color="#0000ff">"hidden"</font></span><span> </span><span class="attribute"><font color="#ff0000">name</font></span><span>=</span><span class="attribute-value"><font color="#0000ff">"max_file_size"</font></span><span> </span><span class="attribute"><font color="#ff0000">value</font></span><span>=</span><span class="attribute-value"><font color="#0000ff">"100000"</font></span><span class="tag"><strong><font color="#006699">></font></strong></span><span> </span>
</li>
<li class="alt">
<span></span><strong><font color="#006699"><span class="tag"><span class="tag-name">input</span></span></font></strong><span> </span><span class="attribute"><font color="#ff0000">name</font></span><span>=</span><span class="attribute-value"><font color="#0000ff">"userfile"</font></span><span> </span><span class="attribute"><font color="#ff0000">type</font></span><span>=</span><span class="attribute-value"><font color="#0000ff">"file"</font></span><span class="tag"><strong><font color="#006699">></font></strong></span><span>  </span>
</li>
<li class="">
<span></span><strong><font color="#006699"><span class="tag"><span class="tag-name">input</span></span></font></strong><span> </span><span class="attribute"><font color="#ff0000">type</font></span><span>=</span><span class="attribute-value"><font color="#0000ff">"submit"</font></span><span> </span><span class="attribute"><font color="#ff0000">value</font></span><span>=</span><span class="attribute-value"><font color="#0000ff">"上传文件"</font></span><span class="tag"><strong><font color="#006699">></font></strong></span><span> </span>
</li>
<li class="alt">
<span></span><strong><font color="#006699"><span class="tag"></span><span class="tag-name">form</span><span class="tag">></span></font></strong><span> </span>
</li>
</ol>

Among them, please note that

This is a tag, If we want to upload files, we must specify multipart/form-data, otherwise the server will not know what to do. It is worth noting that the hidden value field of the form option MAX_FILE_SIZE in the file upload.html can limit the size of the uploaded file by setting its Value. The value of MAX_FILE_SIZE is just a suggestion for browsers, and it can be easily bypassed. So don't rely on this value to limit browser restrictions. In fact, the maximum value for PHP file upload in PHP settings will not be invalid. But it's better to include MAX_FILE_SIZE in the form, as it saves users the trouble of spending time waiting for a large file to be uploaded only to find out that the file is too big.

<ol class="dp-xml">
<li class="alt"><span><span>upload.php  </span></span></li>
<li class="">
<span>$</span><span class="attribute"><font color="#ff0000">f</font></span><span>=&$HTTP_POST_FILES['Myfile'];  </span>
</li>
<li class="alt">
<span>$</span><span class="attribute"><font color="#ff0000">dest_dir</font></span><span>=</span><span class="attribute-value"><font color="#0000ff">'uploads'</font></span><span>;//设定上传目录  </span>
</li>
<li class="">
<span>$</span><span class="attribute"><font color="#ff0000">dest</font></span><span>=$dest_dir.'/'.date("ymd")."_".$f['name'];//设置文件名为日期加上文件名避免重复  </span>
</li>
<li class="alt">
<span>$</span><span class="attribute"><font color="#ff0000">r</font></span><span>=</span><span class="attribute-value"><font color="#0000ff">move_uploaded_file</font></span><span>($f['tmp_name'],$dest);  </span>
</li>
<li class=""><span>chmod($dest, 0755);//设定上传的文件的属性 </span></li>
</ol>

<ol class="dp-xml"><li class="alt"><span><strong><font color="#006699"><span class="tag"></span><span class="tag-name">copy</span></font></strong><span>($_FILES[MyFile][tmp_name],$_FILES[MyFile][name]);</span><span class="tag"><strong><font color="#006699">?></font></strong></span><span> </span></span></li></ol>

The contents of the $_FILES array in the above example are as follows. We assume that the name of the file upload field is userfile (the name can be named arbitrarily)

<ol class="dp-xml">
<li class="alt"><span><span>$_FILES['userfile']['name']//客户端机器文件的原名称。  </span></span></li>
<li class=""><span>$_FILES['userfile']['type'] //文件的 MIME 类型，需要浏览器提供该信息的支持，例如“image/gif”。  </span></li>
<li class="alt"><span>$_FILES['userfile']['size']// 已上传文件的大小，单位为字节。  </span></li>
<li class=""><span>$_FILES['userfile']['tmp_name'] //文件被上传后在服务端储存的临时文件名。  </span></li>
<li class="alt"><span>$_FILES['userfile']['error'] //和该文件上传相关的错误代码 </span></li>
</ol>

PHP file upload value analysis:
◆Value: 0; No error occurs and the file upload is successful.
◆Value: 1; The uploaded file exceeds the limit of the upload_max_filesize option in php.ini.
◆Value: 2; The size of the uploaded file exceeds the value specified by the MAX_FILE_SIZE option in the HTML form.
◆Value: 3; Only part of the file was uploaded.
◆Value: 4; No files were uploaded.

Statement

The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

wpsystem是什么文件夹Sep 01, 2022 am 11:22 AM

wpsystem文件夹是windows应用文件夹；创建WpSystem文件夹是为了存储某些特定“Microsoft Store”应用程序的数据，因此建议不要删该文件夹，因为删除之后就无法使用指定的应用。

winreagent是什么文件夹Aug 26, 2022 am 11:23 AM

winreagent是在系统更新或升级的过程中创建的文件夹；该文件夹中通常包含临时文件，当更新或升级失败时，系统将通过还原先前创建的临时文件来回滚到执行更新或升级过程之前的版本。

baidunetdiskdownload是什么文件夹Aug 30, 2022 am 10:45 AM

baidunetdiskdownload是百度网盘默认下载文件的文件夹；百度网盘是百度推出的一项云存储服务，只要下载东西到百度网盘里，都会默认保存到这个文件夹中，并且可跨终端随时随地查看和分享。

usmt.ppkg是什么文件Sep 09, 2022 pm 02:14 PM

“usmt.ppkg”是windows自带的系统还原功能的系统备份文件；Windows系统还原是在不需要重新安装操作系统，也不会破坏数据文件的前提下使系统回到原有的工作状态，PBR恢复功能的备份文件就是“usmt.ppkg”。

备份文件的扩展名通常是什么Sep 01, 2022 pm 03:55 PM

备份文件的扩展名通常是“.bak”；bak文件是一个备份文件，这类文件一般在'.bak前面加上应该有原来的扩展名，有的则是由原文件的后缀名和bak混合而成，在生成了某种类型的文件后，就会自动生成它的备份文件。

kml是什么文件的格式Sep 14, 2022 am 10:39 AM

kml是谷歌公司创建的一种地标性文件格式；该文件用于记录某一地点或连续地点的时间、经度、纬度、海拔等地理信息数据，可以被“Google Earth”和“Google Maps”识别并显示。

config是什么文件夹可以删除吗Sep 13, 2022 pm 03:48 PM

config是软件或者系统中的配置文件，不可以删除；该文件是在用户开机时对计算机进行初始化设置，也就是用户对系统的设置都由它来对计算机进行恢复，因此不能删除软件或者系统中的config配置文件，以免造成错误。

thm是什么格式的文件Sep 09, 2022 pm 02:18 PM

thm是MP4或者MPG视频格式文件的索引文件，其本质上是一张jpg格式的图片；打开视频播放器除了需要MP4或者MPG格式的视频文件外，还会需要一个thm格式的索引文件才能播放，该文件可以用ACDSEE打开查看。

See all articles

Hot AI Tools

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress images for free

Clothoff.io

AI clothes remover

AI Hentai Generator

Generate AI Hentai for free.

Hot Article

R.E.P.O. Energy Crystals Explained and What They Do (Yellow Crystal)

2 weeks agoBy尊渡假赌尊渡假赌尊渡假赌

Hello Kitty Island Adventure: How To Get Giant Seeds

1 months agoBy尊渡假赌尊渡假赌尊渡假赌

How Long Does It Take To Beat Split Fiction?

4 weeks agoByDDD

R.E.P.O. Save File Location: Where Is It & How to Protect It?

4 weeks agoByDDD

Two Point Museum: All Exhibits And Where To Find Them

1 months agoBy尊渡假赌尊渡假赌尊渡假赌

Hot Tools

MinGW - Minimalist GNU for Windows

This project is in the process of being migrated to osdn.net/projects/mingw, you can continue to follow us there. MinGW: A native Windows port of the GNU Compiler Collection (GCC), freely distributable import libraries and header files for building native Windows applications; includes extensions to the MSVC runtime to support C99 functionality. All MinGW software can run on 64-bit Windows platforms.

DVWA

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is very vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, to help web developers better understand the process of securing web applications, and to help teachers/students teach/learn in a classroom environment Web application security. The goal of DVWA is to practice some of the most common web vulnerabilities through a simple and straightforward interface, with varying degrees of difficulty. Please note that this software

SecLists

SecLists is the ultimate security tester's companion. It is a collection of various types of lists that are frequently used during security assessments, all in one place. SecLists helps make security testing more efficient and productive by conveniently providing all the lists a security tester might need. List types include usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and more. The tester can simply pull this repository onto a new test machine and he will have access to every type of list he needs.