<?php
// Check post_max_size (http://us3.php.net/manual/en/features.file-upload.php#73762)
$POST_MAX_SIZE = ini_get('post_max_size'); $multiplier = ($unit == 'M' ? 1048576 : ($unit == 'K' ? 1024 : ($unit == 'G' ? 1073741824 : 1)));
if ((int)$_SERVER['CONTENT_LENGTH'] > $multiplier*(int)$POST_MAX_SIZE && $POST_MAX_SIZE) {
header("HTTP/1.1 500 Internal Server Error"); // This will trigger an uploadError event in SWFUpload echo "Za duży rozmiar pliku."; }
// Settings
// The path were we will save the file (getcwd() may not be reliable and should be tested in your environment)
$upload_name = "Filedata";
$max_file_size_in_bytes = 2147483647; // 2GB in bytes
$extension_whitelist = array("jpg", "gif", "png","bmp","jpeg","tiff","txt","doc","docx","rtf","odt","pdf","zip","rar","mp3","wav","midi","wma","ogg","mpg","mpeg","avi","flv","mp4","wmv","swf","pdf"); // Allowed file extensions $valid_chars_regex = '.A-Z0-9_ !@#$%^&()+={}\[\]\',~`-'; // Characters allowed in the file name (in a Regular Expression format)
// Other variables
$MAX_FILENAME_LENGTH = 260;
$file_name = "";
$file_extension = "";
0=>"Pliki wgrane poprawne",
1=>"Za duży rozmiar pliku (sprawdź php.ini)",
2=>"Za duży rozmiar pliku (sprawdź plik akcji)",
3=>"Tylko niektóre pliki zostały wgrane",
4=>"Żaden plik nie został wgrany",
6=>"Brak tymczasowego folderu"
);
// Validate the upload
if (!isset($_FILES[$upload_name])) { HandleError("No upload found in \$_FILES for " . $upload_name);
} else if (isset($_FILES[$upload_name]["error"]) && $_FILES[$upload_name]["error"] != 0
) { HandleError($uploadErrors[$_FILES[$upload_name]["error"]]);
} else if (!isset($_FILES[$upload_name]["tmp_name"]) || !@is_uploaded_file($_FILES[$upload_name]["tmp_name"])) { HandleError("Upload failed is_uploaded_file test.");
} else if (!isset($_FILES[$upload_name]['name'])) { HandleError("Plik nie ma nazwy.");
}
// Validate the file size (Warning: the largest files supported by this code is 2GB)
$file_size = @filesize($_FILES[$upload_name]["tmp_name"]); if (!$file_size || $file_size > $max_file_size_in_bytes) {
HandleError("Za duży rozmiar pliku");
}
if ($file_size <= 0) {
HandleError("File size outside allowed lower bound");
}
// Validate file name (for our purposes we'll just remove invalid characters)
$file_name = preg_replace('/[^'.$valid_chars_regex.']|\.+$/i', "", basename($_FILES[$upload_name]['name'])); if (strlen($file_name) == 0
|| strlen($file_name) > $MAX_FILENAME_LENGTH) { HandleError("Nieprawidłowa nazwa pliku");
}
// Validate that we won't over-write an existing file
if (file_exists('../'.$_POST['directory'].'/'.$file_name)) { HandleError("Plik o tej nazwie już istnieje.");
}
// Validate file extension
$path_info = pathinfo($_FILES[$upload_name]['name']); $file_extension = $path_info["extension"];
$is_valid_extension = false;
foreach ($extension_whitelist as $extension) {
if (strcasecmp($file_extension, $extension) == 0
) { $is_valid_extension = true;
break;
}
}
if (!$is_valid_extension) {
HandleError("Nieprawidłowe rozszrzenie pliku.");
}
if (!@move_uploaded_file($_FILES[$upload_name]["tmp_name"], '../'.$_POST['directory'].'/'.$file_name)) { HandleError("Błąd przy wgrywaniu pliku.");
}
function HandleError($message) {
}
?>