HTTP_POST_FILES Type problem

[Anon]

Hi,
I've uploaded files successfully, but now I would like to filter files to only accept JPGs.. so I use the following for example...

$userfile = $HTTP_POST_FILES['userfile']['name'];
$type = $HTTP_POST_FILES['userfile']['type'];
$size = $HTTP_POST_FILES['userfile']['size'];
$location = $HTTP_POST_FILES['userfile']['tmp_name'];

if($type == "images/pjpeg" or "images/jpg"){
move_uploaded_file($location, "./images/$userfile");

echo("uploaded successfuly....");
}
else
{
echo("wrong file type...");
}

THe problem is, it lets any file through...
Anyone have suggestions?

[rolfnilsen]

Hi,

This does not look quite right..

if($type == "images/pjpeg" or "images/jpg"){

Try this instead..

if($type == "images/pjpeg" or $type == "images/jpg"){

Good luck

[Anon]

i dont think theres any problem in the earlier code

[Anon]

Hmm, I checked the MIME type and it's image/**

But that doesn't matter in this case, since it uploads it anyway (like it's completely ignoring my if statement)

I will try some more options.. thanks.

[Anon]

Hmmmmm, interesting... I'm now using a $HTTP_POST_FILES['userfile']['size'] in an if statement, and it seems to be ignoring it too! Very strange.. maybe they can't be used in if statements?

[Anon]

Nevermind.. I fixed the size problem ;-)

I'm posting too much !

[Anon]

LOL!!!!!!!!

I fixed it :-)
Here's what I did, for those who are curious...

$imagetype1 = $HTTP_POST_FILES['image1']['type'];
$imagetype2 = $HTTP_POST_FILES['image2']['type'];
$imagetype3 = $HTTP_POST_FILES['image3']['type'];
$imagetype4 = $HTTP_POST_FILES['image4']['type'];
$imagetype5 = $HTTP_POST_FILES['sitemap']['type'];
if($imagetype1 or $imagetype2 or $imagetype3 or $imagetype4 or $imagetype5 != "image/pjpeg" or "image/jpeg"){
echo("blah blah!");
}
else
{
upload_image_functions_here_yada_yada()
}