Re: Help with file upload

["John W. Holmes" <holmes072000@charter.net>]

Bunmi Akinmboni wrote:

> Pls Help.
> I have done a lot of reading prior to this yet I just can't seem make it 
> work. I wrote an upload program as seen below but the response I got was:
>
> Possible file upload attack. Filename: ayservenet.jpg Array ( [ufile1] 
> => Array ( [name] => ayservenet.jpg [type] => image/pjpeg [tmp_name] => 
> /tmp/phpIMEhdh [error] => 0 [size] => 3030 ) )
[snip]
> if (is_uploaded_file($_FILES['ufile1']['name'])) {
>     copy($_FILES['ufile1']['name'], ".");
>     echo "$ufile1_name ";
>     echo "DONE";
>     echo " ";
>     print_r($_FILES);
> } else {
>     echo "Possible file upload attack. Filename: " . 
> $_FILES['ufile1']['name'];
>     echo " ";
>     print_r($_FILES);
> }
> ?>

You should pass $_FILES['ufile1']['tmp_name'] to is_uploaded_file().

--
---John Holmes...

Amazon Wishlist: www.amazon.com/o/registry/3BEXC84AB3A5E/

php|architect: The Magazine for PHP Professionals – www.phparch.com

--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php