PHP - Adding Restrictions On Multiple Uploads

Hello, I am making an upload script and I want to restrict all file types except png, jpg, and gif. I can't seem to figure it out and help would be appreciated!!



 <?php 
 $target = "images/"; 
 $target = $target . basename( $_FILES['uploaded']['name']) ; 
 $ok=1; 
 
 //This is our size condition 
 if ($uploaded_size > 230000) 
 { 
 echo "Your file is too large.<br>"; 
 $ok=0; 
 } 
 
if (!($uploaded_type=="image/gif")) 
{ 
echo "You may only upload GIF files.<br>"; 
$ok=0; 
}


 //Here we check that $ok was not set to 0 by an error 
 if ($ok==0) 
 { 
 Echo "Sorry your file was not uploaded"; 
 } 
 
 //If everything is ok we try to upload it 
 else 
 { 
 if(move_uploaded_file($_FILES['uploaded']['tmp_name'], $target)) 
 { 
 echo "The file ". basename( $_FILES['uploadedfile']['name']). " has been uploaded"; 
 } 
 else 
 { 
 echo "Sorry, there was a problem uploading your file."; 
 } 
 } 
 ?> 

Hello I am trying to make this a multiple file upload. It uploads a 1 file just fine. but I can't get it to upload several. I am a newbie at this. Can you please help me with this script. Thank you.
Code: [Select]
// My form
<form action="upload_file.php" method="post"
enctype="multipart/form-data">
<label for="file">file1:</label>
<input type="file" name="file" id="file" />
<label for="file">file2:</label>
<input type="file" name="file" id="file" />
<label for="file">file3:</label>
<input type="file" name="file" id="file" />
<input type="submit" name="submit" value="Submit" />

</form>

// my upload script
<?php
$path1= "upload/" . $_FILES["file"]["name"];
if ((($_FILES["file"]["type"] == "image/gif")
|| ($_FILES["file"]["type"] == "image/jpeg")
|| ($_FILES["file"]["type"] == "image/pjpeg"))
&& ($_FILES["file"]["size"] < 10000000))
  {
  if ($_FILES["file"]["error"] > 0)
    {
    echo "Return Code: " . $_FILES["file"]["error"] . "<br />";
    }
  else
    {
    echo "Front of Press Kit:<br /><br />";
 

    if (file_exists("upload/" . $_FILES["file"]["name"]))
      {
      echo $_FILES["file"]["name"] . 
"   already exists. Please change the name. Try adding more letters to the file name. Thank You. ";
      }
    else
      {
      move_uploaded_file($_FILES["file"]["tmp_name"],
      "upload/" . $_FILES["file"]["name"]);
      echo "<img src=\"$path1\" width=\"360\" height=\"278\">";
      }
    }
  }
else
  {
  echo "Invalid file";
  }
?>

Hi: Am not sure if this is the best algorithm to go about  saving a record and uploading (plus moving to another directory) files. I feel i need another algorithm?

if (self::post()->isPost()) { 
                           
            #check if there is any file
            if($this->request->hasFiles() == true){            
                    $uploads = $this->request->getUploadedFiles();
                    $isUploaded = false;
                    #do a loop to handle each file individually
                    foreach($uploads as $upload){
                        #define a "unique" name and a path to where our file must go
                        $path = 'temp/'.md5(uniqid(rand(), true)).'-'.strtolower($upload->getname());

                        #move the file and simultaneously check if everything was ok
                       if($upload->moveTo($path)) {                          
                        #Build an array to be sent to the API for moving the uploaded file to front end directory                        
                           $files="";
                           $files = array(
                            'name' => $upload->getName(),
                            'link' => $this->di['url']->get('temp/' . $upload->getName()),
                            'direction' => 'adverts'
                            );
                        
                          $saveResult = self::request()->request('move-advert/', array('file' => $files), 'POST');
                          if($saveResult->response == 'success') $isUploaded = true; else $isUploaded = false;                          
                           
                       }
                    }
                    #if any file couldn't be moved, then throw an message
                    if($isUploaded) {                         
                        
                        $save_response = self::request()->request('advert/' . $id, self::editValues(self::post()->getPost()), 'POST');
                        if ($save_response->response == 'success') 
                            {
                                 $this->flashSession->success('Advert Updated');
                                 return $this->response->redirect('adverts/list-adverts');
                            } else {
                                $this->flashSession->notice('Could not update Advert');
                            }                                             
                        
                    } else {
                            $this->flashSession->notice('Some error ocurred. Please try again');
                   }
             
             }else {            
                 $this->flashSession->notice('You must Choose an advert image');
            }    
        }

Any suggestions?

I'm making the password field have these restrictions:

Length >= 8

That's it. I then use javascript to md5 the value of that text field, then I send it using ajax to the php script to process the signup. Is it bad not to have a max length, or does this way work. Any suggestions?

Hello,

I have this script running:
  Code: [Select]
<?php
//include("include/session.php");
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Add an Image to Gallery</title>
<link href="../../include/stylee.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="wrap">
<div id="content">
<form enctype="multipart/form-data" action="<? $_SERVER['PHP_SELF'] ?>" method="post">
<fieldset title="Add Images and Descriptions">
<legend>Add Images and Descriptions</legend>
  <p>
    Choose a file to upload: <br />
    <input name="image" type="file" />
    </p>
<p>Give the Image a Short Description<br />
<input name="ushortdesc" type="text" size="60" maxlength="75" />
</p>
  <p>Give the Image a Long Description<br />
    <textarea name="ulongdesc" cols="60" rows="10"></textarea>
  </p>
  <p>Where does the Image Link to?<br />
  <input name="uimglink" type="text" value="http://www.yoursite.com/yourstore/or..." size="60" />
</p>
  <p>
    <input type="submit" name="upload" value="Upload" /> 
</p>
</fieldset>
</form>
</div>
<div id="report">
<?php
//function createThumbs( $pathToImages, $pathToThumbs, $thumbWidth )
//{
//  // open the directory
//  $dir = opendir( $pathToImages );
//
//  // loop through it, looking for any/all JPG files:
//  while (false !== ($fname = readdir( $dir ))) {
//    // parse path for the extension
//    $info = pathinfo($pathToImages . $fname);
//    // continue only if this is a JPEG image
//    if ( strtolower($info['extension']) == 'jpg' )
//    {
//      echo "Creating thumbnail for {$fname} <br />";
//
//      // load image and get image size
//      $img = imagecreatefromjpeg( "{$pathToImages}{$fname}" );
//      $width = imagesx( $img );
//      $height = imagesy( $img );
//
//      // calculate thumbnail size
//      $new_width = $thumbWidth;
//      $new_height = floor( $height * ( $thumbWidth / $width ) );
//
//      // create a new temporary image
//      $tmp_img = imagecreatetruecolor( $new_width, $new_height );
//
//      // copy and resize old image into new image - for gd-1 version
// //imagecopyresized( $tmp_img, $img, 0, 0, 0, 0, $new_width, $new_height, $width, $height );
// //randys alteration for gd-2 version
// imagecopyresampled( $tmp_img, $img, 0, 0, 0, 0, $new_width, $new_height, $width, $height );
//
//      // save thumbnail into a file
//      imagejpeg( $tmp_img, "{$pathToThumbs}{$fname}" );
//    }
//  }
//  // close the directory
//  closedir( $dir );
//}
// // call createThumb function and pass to it as parameters the path
//// to the directory that contains images, the path to the directory
//// in which thumbnails will be placed and the thumbnail's width.
//// We are assuming that the path will be a relative path working
//// both in the filesystem, and through the web for links
//createThumbs("images/","images/thumbs/",100);
//echo "<h2>All Done!</h2>";

if(isset($_POST['upload']))
{
$size = 50; // the thumbnail height

$filedir = 'images/'; // the directory for the original image
$thumbdir = 'thumbs/'; // the directory for the thumbnail image
$prefix = 'thumb_'; // the prefix to be added to the original name

$maxfile = '2100000';
$mode = '0666';

$userfile_name = $_FILES['image']['name'];
$userfile_tmp = $_FILES['image']['tmp_name'];
$userfile_size = $_FILES['image']['size'];
$userfile_type = $_FILES['image']['type'];

if (isset($_FILES['image']['name'])) 
{
$uimg = $filedir.$userfile_name;
$uimg_thumb = $thumbdir.$prefix.$userfile_name;
move_uploaded_file($userfile_tmp, $uimg);
chmod ($uimg, octdec($mode));

$sizes = getimagesize($uimg);
$aspect_ratio = $sizes[0]/$sizes[0]; 

if ($sizes[0] <= $size)
{
$new_width = $sizes[0];
$new_height = $sizes[0];
}else{
$new_height = $size;
$new_width = abs($new_height/$aspect_ratio);
}

$destimg=ImageCreateTrueColor($new_width,$new_height)
or die('Problem In Creating image');
$srcimg=ImageCreateFromJPEG($uimg)
or die('Problem In opening Source Image');
if(function_exists('imagecopyresampled'))
{
imagecopyresampled($destimg,$srcimg,0,0,0,0,$new_width,$new_height,ImageSX($srcimg),ImageSY($srcimg))
or die('Problem In resizing');
}else{
Imagecopyresized($destimg,$srcimg,0,0,0,0,$new_width,$new_height,ImageSX($srcimg),ImageSY($srcimg))
or die('Problem In resizing');
}
ImageJPEG($destimg,$uimg_thumb,90)
or die('Problem In saving');
imagedestroy($destimg);
}

echo '
<a href="'.$uimg.'">
<img src="'.$uimg_thumb.'" width="'.$new_width.'" heigt="'.$new_height.'">
</a>';
}
?>
</div>
</body>
</html>

Works great, except when I upload a 400kb or larger file... Is there some kind of limit to the ability of the GD library?

Anyone have a work around?

Thanks!