I need help with this code. I'm trying to upload a file but I always get the error message: Possible file upload attack!
I don't understand why.
Can someone please help me?
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<title>Untitled Document</title>
</head>
<body>
<form action="test_upload.php" method="post" enctype="multipart/form-data">
<p>Pictures:
<input type="file" name="pictures" />
<input type="submit" value="Send" />
</p>
</form>
</body>
</html>
<?
$uploaddir = '/pictures/upload/';
$uploadfile = $uploaddir . basename($_FILES['pictures']['name']);
if (move_uploaded_file($_FILES['pictures']['tmp_name'], $uploadfile))
{
echo "File is valid, and was successfully uploaded.\n";
}
else
{
echo "Possible file upload attack!\n";
}
//echo basename($_FILES['pictures']['name']);
echo '<br>';
echo $uploadfile;
?>
