Upload file/Check if its already there?

Tim Dobson · 06-28-2010, 04:05 PM

Helloooooooooooooo.

Just need a bit of assistance with this.

Using the following script to upload a file how would i go about checking if the file is already on server and if it is bail out?

PHP Code:


			
<?php

   // Configuration - Your Options

      $allowed_filetypes = array('.jpg','.gif','.bmp','.png'); // These will be the types of file that will pass the validation.

      $max_filesize = 524288; // Maximum filesize in BYTES (currently 0.5MB).

      $upload_path = './files/'; // The place the files will be uploaded to (currently a 'files' directory).

 

   $filename = $_FILES['userfile']['name']; // Get the name of the file (including file extension).

   $ext = substr($filename, strpos($filename,'.'), strlen($filename)-1); // Get the extension from the filename.

 

   // Check if the filetype is allowed, if not DIE and inform the user.

   if(!in_array($ext,$allowed_filetypes))

      die('The file you attempted to upload is not allowed.');

 

   // Now check the filesize, if it is too large then DIE and inform the user.

   if(filesize($_FILES['userfile']['tmp_name']) > $max_filesize)

      die('The file you attempted to upload is too large.');

 

   // Check if we can upload to the specified path, if not DIE and inform the user.

   if(!is_writable($upload_path))

      die('You cannot upload to the specified directory, please CHMOD it to 777.');

 

   // We'll start handling the upload in the next step

 

?>

<?php

   // Configuration - Your Options

      $allowed_filetypes = array('.jpg','.gif','.bmp','.png'); // These will be the types of file that will pass the validation.

      $max_filesize = 524288; // Maximum filesize in BYTES (currently 0.5MB).

      $upload_path = './files/'; // The place the files will be uploaded to (currently a 'files' directory).

 

   $filename = $_FILES['userfile']['name']; // Get the name of the file (including file extension).

   $ext = substr($filename, strpos($filename,'.'), strlen($filename)-1); // Get the extension from the filename.

 

   // Check if the filetype is allowed, if not DIE and inform the user.

   if(!in_array($ext,$allowed_filetypes))

      die('The file you attempted to upload is not allowed.');

 

   // Now check the filesize, if it is too large then DIE and inform the user.

   if(filesize($_FILES['userfile']['tmp_name']) > $max_filesize)

      die('The file you attempted to upload is too large.');

 

   // Check if we can upload to the specified path, if not DIE and inform the user.

   if(!is_writable($upload_path))

      die('You cannot upload to the specified directory, please CHMOD it to 777.');

 

   // Upload the file to your specified path.

   if(move_uploaded_file($_FILES['userfile']['tmp_name'],$upload_path . $filename))

         echo 'Your file upload was successful, view the file <a href="' . $upload_path . $filename . '" title="Your File">here</a>'; // It worked.

      else

         echo 'There was an error during the file upload.  Please try again.'; // It failed :(.

 

?>

Tim Dobson · 06-28-2010, 04:30 PM

lol nevermind i got it i just droped

PHP Code:


			
if (file_exists($checkfile)) {

    die('The file $checkfile exists');

} else {

    

}

in to the code before the upload took place

delayedinsanity · 06-28-2010, 05:41 PM

I don't think you're being pedantic enough here. I think what you need to do is write an asynchronous call to a remote script on another server that can in turn tunnel back over ssh and trigger a setuid root script that will grep your entire filesystem for any matches or even just possible matches.

Otherwise, you could wind up with a duplicate file. :)