Php Allowable uploaded file extension

Question

Possible Duplicate:
How can I only allow certain filetypes on upload in php?

i'm learning PHp and Mysql. I want to create a function that allow only specific file extension which uploaded by user. Like..

$whitelist = array("jpg","jpeg","gif","png","bmp","pdf" );

So how do i check this specific file extension with php. Can anyone tell me please.. Thank you.

score 2 · Accepted Answer · answered Apr 09 '12 at 08:01

2

This is an option:

function checkFormat($source){
    $whitelist = array("jpg","jpeg","gif","png","bmp","pdf" );
    $type="";
    if(version_compare('4.3.0', PHP_VERSION) > 0){
        $type=mime_content_type($source['tmp_name']);
    }else{
        $type=$source['type'];
    }

    return (in_array($type, $whitelist));
}

Regards!

answered Apr 09 '12 at 08:01

Lobo

4,001
8
37
67

one needs to say you need to call `checkFormat($_FILES["fieldname"])` – Stefan Apr 09 '12 at 08:05
$source means $_FILE['file']['tmp_name']; ? – user1295995 Apr 09 '12 at 08:06
no `$source` means `$_FILES["file"]` – Stefan Apr 09 '12 at 08:08
What does mean by only...$_FILES['file'] ? – user1295995 Apr 09 '12 at 08:09
@user1295995 Check http://php.net/manual/en/reserved.variables.files.php. $source is the associative array of items uploaded to the current script via the HTTP POST method. In your form must exist an input named "file", like – Lobo Apr 09 '12 at 08:12

score 2 · Answer 2 · edited May 23 '17 at 12:32

2

Get the file extension of the uploaded file with pathinfo^Docs like

$extension = pathinfo($filename, PATHINFO_EXTENSION);

and then check against a whitelist of allowed exentsions

$allowedExtensions = array("jpg","jpeg","gif","png","bmp","pdf");
$isAllowed = in_array($extension, $allowedExtensions);

maybe you need to modify the extension recognize function to get some special extensions like tar.gz, but that should do the trick.

Edit: As said here you shouldn't check the file extension, but the mime-type.

edited May 23 '17 at 12:32

Community

1
1

answered Apr 09 '12 at 08:02

Stefan

2,028
2
36
53

1

Forget explode, there is [`pathinfo`](http://php.net/pathinfo) ;) – hakre Apr 09 '12 at 08:13
hakre: you're the man ! :) my method was rather "quick and dirty" ;) – Stefan Apr 09 '12 at 08:19

score 0 · Answer 3 · answered Apr 09 '12 at 08:07

0

Look here: http://www.w3schools.com/php/php_file_upload.asp

It provides an example that shows how to do it.

answered Apr 09 '12 at 08:07

yoni0505

349
2
4
8

Obligatory http://w3fools.com/ – dtech Apr 09 '12 at 08:11

Php Allowable uploaded file extension

3 Answers3

Linked