[CarBoffin]

Hi,
I have a simple script i made to upload images, but my file size and file type check isn't working .

Heres my script:

PHP Code:

<title>Saving...</title>

<? 

/* Security Check */

$site = $_GET['site'];

$pass = $_GET['password'];

if (!$pass)

echo'<meta http-equiv="refresh" content="0;URL=index.php">';

else

require "$site/vars.php";

if ($pass == "$password")

echo"";

else 

exit();

/* Checked */





/* File Checking */

if ($_FILES['pic']['size'] > 5242880)

die('Too Big, Maximum Size is <strong> 5MB </strong>. <p> Please Wait As You Are Sent Back To The Change Photo Page... <meta http-equiv="refresh" content="3;URL=javascript: history.go(-1)">');



if ($_FILES['pic']['type'] == "image/gif");

elseif ($_FILES['pic']['type'] == "image/jpg");

elseif ($_FILES['pic']['type'] == "image/jpeg");

elseif ($_FILES['pic']['type'] == "image/bmp");

elseif ($_FILES['pic']['type'] == "image/png");

else

die ('<stong> Wrong </strong> Photo File Type, Must be: <strong> <p> Gif <p> Jpg <p> Jpeg <p> Bmp <p> Png </strong> <p> Please Wait As You Are Sent Back To The Change Photo Page... <meta http-equiv="refresh" content="4;URL=javascript: history.go(-1)">');

/* File Checked */



/* Delete Existing File */

if(file_exists("$site/$picl"))

unlink("$site/$picl");

else

echo"";

/* Deleted*/



/* Uploading */

copy ($_FILES['pic']['tmp_name'], "$site/".$_FILES['pic']['name']);

/* Uploaded */





/* Vars For Writing */

$name = $namel;

$pic = $_FILES['pic']['name'];

$age = $agel;

$location = $locationl;

$gender = $genderl;

$status = $statusl;

$height = $heightl;

$weight = $weightl;

$job = $jobl;

$about = $aboutl;

$likes = $likesl;

$hobbies = $hobbiesl;

$contact = $contactl;

$theme = $themel;

$games = $gamesl;

$counter = $counterl;

$bg = $bgl;

/* Vars Defined */



/* File Writing */

include"data-dex.php";

include"data-vars.php";

/* File Written */



/* Confirmation */

include"successful.php";

/* Confirmed */

?>

Thanks

[Frank]

Check filesize: http://www.php.net/filesize
Check file type: http://www.php.net/manual/en/functio...ntent-type.php



If you need help:

PHP Code:

/* File Checking */

if (filesize($_FILES['pic']['size']) > 5242880)

die('Too Big, Maximum Size is <strong> 5MB </strong>. <p> Please Wait As You Are Sent Back To The Change Photo Page... <meta http-equiv="refresh" content="3;URL=javascript: history.go(-1)">');



if (mime_content_type($_FILES['pic']['type']) == "image/gif");

elseif (mime_content_type($_FILES['pic']['type']) == "image/jpg");

elseif (mime_content_type($_FILES['pic']['type']) == "image/jpeg");

elseif (mime_content_type($_FILES['pic']['type']) == "image/bmp");

elseif (mime_content_type($_FILES['pic']['type']) == "image/png");

else

die ('<stong> Wrong </strong> Photo File Type, Must be: <strong> <p> Gif <p> Jpg <p> Jpeg <p> Bmp <p> Png </strong> <p> Please Wait As You Are Sent Back To The Change Photo Page... <meta http-equiv="refresh" content="4;URL=javascript: history.go(-1)">');

/* File Checked */ 

Frank

[CarBoffin]

thanks

[CarBoffin]

Thanks for the help but i get this error:

Warning: stat failed for 1907 (errno=2 - No such file or directory) in c:\ibserver\www\sites\save-image.php on line 18

Fatal error: Call to undefined function: mime_content_type() in c:\ibserver\www\sites\save-image.php on line 21

You can see for your self here:

http://217.42.225.48/Sites/edit-phot...254561b24f0ff5

Heres what my new script looks like:

PHP Code:

<title>Saving...</title>

<? 

/* Security Check */

$site = $_GET['site'];

$pass = $_GET['password'];

if (!$pass)

echo'<meta http-equiv="refresh" content="0;URL=index.php">';

else

require "$site/vars.php";

if ($pass == "$password")

echo"";

else 

exit();

/* Checked */





 /* File Checking */ 

if (filesize($_FILES['pic']['size']) > 5242880) 

die('Too Big, Maximum Size is <strong> 5MB </strong>. <p> Please Wait As You Are Sent Back To The Change Photo Page... <meta http-equiv="refresh" content="3;URL=java_script_: history.go(-1)">'); 



if (mime_content_type($_FILES['pic']['type']) == "image/gif"); 

elseif (mime_content_type($_FILES['pic']['type']) == "image/jpg"); 

elseif (mime_content_type($_FILES['pic']['type']) == "image/jpeg"); 

elseif (mime_content_type($_FILES['pic']['type']) == "image/bmp"); 

elseif (mime_content_type($_FILES['pic']['type']) == "image/png"); 

else 

die ('<stong> Wrong </strong> Photo File Type, Must be: <strong> <p> Gif <p> Jpg <p> Jpeg <p> Bmp <p> Png </strong> <p> Please Wait As You Are Sent Back To The Change Photo Page... <meta http-equiv="refresh" content="4;URL=java_script_: history.go(-1)">'); 

/* File Checked */ 





/* Delete Existing File */

if(file_exists("$site/$picl"))

unlink("$site/$picl");

else

echo"";

/* Deleted*/



/* Uploading */

copy ($_FILES['pic']['tmp_name'], "$site/".$_FILES['pic']['name']);

/* Uploaded */





/* Vars For Writing */

$name = $namel;

$pic = $_FILES['pic']['name'];

$age = $agel;

$location = $locationl;

$gender = $genderl;

$status = $statusl;

$height = $heightl;

$weight = $weightl;

$job = $jobl;

$about = $aboutl;

$likes = $likesl;

$hobbies = $hobbiesl;

$contact = $contactl;

$theme = $themel;

$games = $gamesl;

$counter = $counterl;

$bg = $bgl;

/* Vars Defined */



/* File Writing */

include"data-dex.php";

include"data-vars.php";

/* File Written */



/* Confirmation */

include"successful.php";

/* Confirmed */

?>