Vulnerable-Web-Application/FileUpload/fileupload2.php
2018-11-30 04:02:53 +06:00

35 lines
872 B
PHP

<!DOCTYPE html>
<html>
<body>
<form action="" method="post" enctype="multipart/form-data">
Select image ->
<input type="file" name="file" id="file">
<hr>
<input type="submit" value="Submit" name="submit">
</form>
<?php
// Check if image file is a actual image or fake image
if(isset($_POST["submit"])) {
$target_dir = "uploads/";
$target_file = $target_dir . basename($_FILES["file"]["name"]);
$uploadOk = 1;
$imageFileType = strtolower(pathinfo($target_file,PATHINFO_EXTENSION));
$type = $_FILES["file"]["type"];
if($type != "image/png" && $type != "image/jpeg" ){
echo "JPG, JPEG, PNG & GIF files are allowed.";
$uploadOk = 0;
}
if($uploadOk == 1){
move_uploaded_file($_FILES["file"]["tmp_name"], $target_file);
echo "File uploaded /uploads/".$_FILES["file"]["name"];
}
}
?>
</body>
</html>