- => le fichier html (upload.html)
-
-
- <form enctype="multipart/form-data" action="upload.php3" method="post">
- <input type="text" name="MAX_FILE_SIZE" value="1000">
- Send this file: <input name="userfile" type="file">
- <input type="submit" value="Send File">
- </form>
-
-
- => le fichier php (upload.php3)
-
- <?php
- /* Userland test for uploaded file. */
- function is_uploaded_file($filename) {
- if (!$tmp_file = get_cfg_var('upload_tmp_dir')) {
- $tmp_file = dirname(tempnam('', ''));
- }
- $tmp_file .= '/' . basename($filename);
- /* User might have trailing slash in php.ini... */
- return (ereg_replace('/+', '/', $tmp_file) == $filename);
- }
-
- if (is_uploaded_file($userfile)) {
- copy($userfile, "/place/to/put/uploaded/file");
- } else {
- echo "Possible file upload attack: filename '$userfile'.";
- }
- ?>
-
-
=> le fichier html (upload.html)
<form enctype="multipart/form-data" action="upload.php3" method="post">
<input type="text" name="MAX_FILE_SIZE" value="1000">
Send this file: <input name="userfile" type="file">
<input type="submit" value="Send File">
</form>
=> le fichier php (upload.php3)
<?php
/* Userland test for uploaded file. */
function is_uploaded_file($filename) {
if (!$tmp_file = get_cfg_var('upload_tmp_dir')) {
$tmp_file = dirname(tempnam('', ''));
}
$tmp_file .= '/' . basename($filename);
/* User might have trailing slash in php.ini... */
return (ereg_replace('/+', '/', $tmp_file) == $filename);
}
if (is_uploaded_file($userfile)) {
copy($userfile, "/place/to/put/uploaded/file");
} else {
echo "Possible file upload attack: filename '$userfile'.";
}
?>