Gecko [ tradesense.co.ke ]

Name	Size	Permission	Action
upload.php	1.07 KB	-rw-r--r--

Code Editor : upload.php

<?php
include "../inc/App.php";
$user->Protect();

$imageFolder = 'files/';
reset ($_FILES);
$temp = current($_FILES);
if (is_uploaded_file($temp['tmp_name'])){
    // Sanitize input
    if (preg_match("/([^\w\s\d\-_~,;:\[\].])|([\.]{2,})/", $temp['name'])) {
        header("HTTP/1.0 500 Invalid file name.");
        return;
    }

// Verify extension
    if (!in_array(strtolower(pathinfo($temp['name'], PATHINFO_EXTENSION)), array("gif", "jpg", "png"))) {
        header("HTTP/1.0 500 Invalid extension.");
        return;
    }

// Accept upload if there was no origin, or if it is an accepted origin
    $filetowrite = $imageFolder . $temp['name'];
    move_uploaded_file($temp['tmp_name'], $filetowrite);

// Respond to the successful upload with JSON.
    // Use a location key to specify the path to the saved image resource.
    // { location : '/your/uploaded/image/file'}
    echo json_encode(array('location' => 'upload/'.$filetowrite));
} else {
    // Notify editor that the upload failed
    header("HTTP/1.0 500 Server Error");
}
?>

${this.title}

Code Editor : upload.php