[dragge]

I have a image upload script on my site and when the user submits a file with a space in it my other "Random Image" script flips out and cant read/print the image out and i get that "cute" little box with a red X in it.

What and Where, should i write in my upload script so that it checks if the filename has a space in it and auto renames the file when uploaded.

Like:
User uploading file "me and myself.jpg" the script will make it "me_and_myself.jpg" or simply take the spaces away like "meandmyself.jpg".

Where should i put this kinda code in my upload script?

Code:

<?
if($_POST["submit_file"]) {

    $path = "file/";
    $maxsize = 400000;

    if(is_uploaded_file($HTTP_POST_FILES["userfile"]["tmp_name"])) {

       if($HTTP_POST_FILES["userfile"]["size"]>$maxsize) {
          echo("File is too big<br>\n"); exit;
          }

       if(($HTTP_POST_FILES["userfile"]["type"]=='image/gif') || ($HTTP_POST_FILES["userfile"]["type"]=='image/pjpeg') || ($HTTP_POST_FILES["userfile"]["type"]=='image/jpg')) {
          if(file_exists($path . $HTTP_POST_FILES["userfile"]["name"])) {
             echo("The file already exists!<br>\n"); exit;
             }

          $res = copy($HTTP_POST_FILES["userfile"]["tmp_name"], $path . $HTTP_POST_FILES["userfile"]["name"]);

          if(!$res) {
              echo("Upload failed!<br>\n"); exit;
              } else {
              echo("Upload sucessful!<br>\n");
              }

          echo("File link: <a target='_blank' href='http://www.turboklubben.se/file/".$HTTP_POST_FILES["userfile"]["name"]."'>http://www.turboklubben.se/file/".$HTTP_POST_FILES["userfile"]["name"]."</a><br>\n");

       } else {

          echo("Wrong filetype!<br>\n"); exit;

       }
    }
}
?>

[Gtwy]

Try using something along these lines...
You can make changes to the code later.. this is something I use on my site:

For the HTML page with the form:

Code:

<form enctype="multipart/form-data" action="images/upload.php" method="post">
    <input type="hidden" name="MAX_FILE_SIZE" value="2097152" />
    choose image: <input name="userfile" type="file" />
    <input type="submit" value="Upload File" />
</form>

For the PHP page with the PHP (duh):

PHP Code:

<?php

$uploadDir = '/path/to/images/';

$uploadFile = $uploadDir . $_FILES['userfile']['name'];

$localFile = $_FILES['userfile']['name'];

$before = strtolower($localFile);

$brokenfile = explode(".", $before);

$end = $brokenfile[1];



if ((move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadFile)) AND ($end == "jpg" || $end == "gif" || $end == "jpeg" || $end == "bmp" || $end == "png"))

{

    print "<center><br><br><br><a href=\"http://www.website.net/images\"><img src=\"$localFile\" border=0></a><br><br></center>";

}

else

{

    print "Possible file upload attack!  Here's some debugging info:\n";

    print_r($_FILES);

}



?>

And then for the PHP in your image directory try using this (make it index.php):

PHP Code:

<?php

$exts = "jpg jpeg gif png bmp";

$files = array();

$i = -1;

$handle = opendir("./");

$exts = explode(" ", $exts);



while (false !== ($file = readdir($handle))) {

        foreach($exts as $ext) {

                if (preg_match("/\.".$ext."$/i", $file, $test)) {

                        $files[] = $file;

                        $i++;

                }

        }

}

closedir($handle);

for($i=0;$i<count($files);$i++){

echo "<img src=\"".$files[$i]."\"><br>\n";

}

?>

Of course, you're going to want to throw in some actual HTML around all that code/php so that it doesn't look like shit. I didn't write all that code, I just modified it a bunch. Honestly I can't say who came up with it originally because my friend Davin sent it to me.