PHP Validating the File Upload [duplicate]

by

You should pass the tmp_name of the file* to getimagesize, it will give you the size and type of the image (if it is an image). If the passed argument is a file but not an image it returns false, that will allow you to validate.

Edit: The only reliable method of image validation is to make a copy of it using GD or Imagick – getimagesize can be easily hacked.

*: I mean, the temporal file created after upload.

For example:

if ($_SERVER['REQUEST_METHOD'] === 'POST')
{
    $file = $_FILES['file']['tmp_name'];
    if (file_exists($file))
    {
        $imagesizedata = getimagesize($file);
        if ($imagesizedata === FALSE)
        {
            //not image
        }
        else
        {
            //image
            //use $imagesizedata to get extra info
        }
    }
    else
    {
        //not file
    }
}

This code uses file_exists just to be general. In case no file were uploaded you would get $_FILES['file']['size'] = 0, $_FILES['file']['tmp_name'] = '' and $_FILES['file']['error'] = 4. See also is_readable. For the error values see file upload errors explained at php.net.

More Related Contents:

  1. Full Secure Image Upload Script
  2. Convert JPG/GIF image to PNG in PHP?
  3. PHP upload image
  4. Secure User Image Upload Capabilities in PHP
  5. the dreaded “Warning: imagecreatefromjpeg() : ‘/tmp/filename’ is not a valid JPEG file in /phpfile.php on line xxx”
  6. Fix iOS picture orientation after upload PHP
  7. Why does this PDO statement silently fail?
  8. Cleansing User Passwords
  9. Can I store images in MySQL [duplicate]
  10. How can I use PDO to fetch a results array in PHP?
  11. What are the disadvantages of using persistent connection in PDO
  12. Upload Progress Bar in PHP
  13. PHP PDOException: “SQLSTATE[HY093]: Invalid parameter number”
  14. Merging two images with PHP
  15. MySQL check if a table exists without throwing an exception
  16. Error logging, in a smooth way
  17. How to embed images in html email
  18. How to reduce the image size without losing quality in PHP [closed]
  19. How to read “fetch(PDO::FETCH_ASSOC);”
  20. Is there a way to fetch associative array grouped by the values of a specified column with PDO?
  21. PDOstatement (MySQL): inserting value 0 into a bit(1) field results in 1 written in table
  22. Why is constructing PDO connection slow?
  23. php code to test pdo is available?
  24. PDO fetchAll group key-value pairs into assoc array
  25. how to properly use while loop in PDO fetchAll
  26. POST a file string using cURL in PHP?
  27. Binding parameters for WHERE IN clause with PDO [duplicate]
  28. How to install Imagick/imagemagick PHP extension on windows 7
  29. Working with GD ( imagettftext() ) and UTF-8 characters
  30. Is a BLOB converted using the current/default charset in MySQL?

Leave a Comment