$filedir="/some/path"; $convert="/usr/bin/convert"; ?> if (!isset($_FILES['docupload'])) { ?>
[Check uploaded files] } else { $file_name=$_FILES['docupload']['name']; $file_tmp=$_FILES['docupload']['tmp_name']; $cleaned_name=ereg_replace("[^A-Za-z0-9\.]",'',$file_name); if (substr_count($cleaned_name,'.')<1) die("Invalid File"); $ext = strtolower(substr(strrchr($cleaned_name, '.'), 1)); $allow_file=0; switch($ext) { case 'bmp': case 'wbmp': case 'jpg': case 'jpeg': case 'jpe': case 'gif': case 'png': case 'tif': case 'tiff': case 'tga': $allow_file=1; break; default: $allow_file=0; } if ($allow_file==0) die("Invalid File"); if($_FILES['docupload']['size']==0) die("File size was 0, sorry"); if(file_exists("$filedir/$cleaned_name")) die("A file named $cleaned_name already exists, rename yours and try again."); $size=getimagesize($file_tmp); if (!$size||!is_array($size)) { unlink($file_tmp); die("The file uploaded was not an image"); } $height=$size[1]; $width=$size[0]; print "You just uploaded $cleaned_name, which was a {$_FILES['docupload']['type']}, and of size {$_FILES['docupload']['size']}