48 lines
2.1 KiB
PHP
48 lines
2.1 KiB
PHP
<?php
|
|
|
|
// Current working directory, relative to root...
|
|
$directory_self = str_replace(basename($_SERVER['PHP_SELF']), '', $_SERVER['PHP_SELF']);
|
|
|
|
// Directory getting the uploaded file...
|
|
$uploadsDirectory = $_SERVER['DOCUMENT_ROOT'] . $directory_self . 'awesome/';
|
|
|
|
// Referring upload form. Could probably do this based on the request, but I'm lazy and can't recall how. STFU. >_>
|
|
$uploadForm = 'http://' . $_SERVER['HTTP_HOST'] . $directory_self . 'index.html';
|
|
|
|
// Self explanatory, I would think.
|
|
$fieldname = 'dragonfruit';
|
|
|
|
// Possible upload errors, have some fun here.
|
|
$errors = array(1 => 'WTF were you thinking? php.ini max file size was exceeded. Get with the program.',
|
|
2 => 'You have *got* to be kidding me - you exceeded the maximum html form file size!',
|
|
3 => 'Come on now, that file upload was only partial. (Try again)',
|
|
4 => 'Uhh... hello? No file was attached.');
|
|
|
|
// Check with PHP's built-in uploading errors
|
|
($_FILES[$fieldname]['error'] == 0) or error($errors[$_FILES[$fieldname]['error']]);
|
|
|
|
// Make sure this was really an HTTP upload
|
|
@is_uploaded_file($_FILES[$fieldname]['tmp_name']) or error('Not an HTTP upload... (Go back and try again?)');
|
|
|
|
// Validation hack - just run it through getimagesize() ;)
|
|
@getimagesize($_FILES[$fieldname]['tmp_name']) or error('Only image uploads are allowed. (Go back and try again)');
|
|
|
|
// We need a unique filename. Judge it off the date and such, should prevent 99% of the same-name errors.
|
|
$now = time();
|
|
while(file_exists($uploadFilename = $uploadsDirectory.$now.'-'.$_FILES[$fieldname]['name'])) {
|
|
$now++;
|
|
}
|
|
|
|
// Move to the final location and actually rename.
|
|
@move_uploaded_file($_FILES[$fieldname]['tmp_name'], $uploadFilename) or error('We have received insufficient permissions. Locked on and ready to fire! (Go back and try again)');
|
|
|
|
// Redirect to a success page. If we posted this through JS/Iframe or Flash, you'd wanna just return the string filename.
|
|
header('Location: index.php?image=' . $now . '-' . $_FILES[$fieldname]['name']);
|
|
|
|
// Generic error handler. Fuck PHP.
|
|
function error($error) {
|
|
echo $error;
|
|
exit;
|
|
}
|
|
|
|
?>
|