Making sure only gif and jpg images are uploaded

[mrgrammar]

I have a form that a customer will be using to upload images. The code uses GET for the image.

$status = $_GET['upload'];
	if  ($status=='1'){
		$form_password = $_POST['password'];
		include("config.php");
		if ($form_password == $password){
			copy("$file","$upload_folder$file_name");
			echo "<center><div class='norm'><b>$file_name was successfully uploaded.</b></div></center>";
		}else{
			echo "<center><div class='norm'><b>The upload password was not correct, please go back and 
					re-enter the password correctly.</b></div></center>";
		}
		echo "<hr>";
	}

I want to make sure that only gif and jpg images can be uploaded. How is that best done?

[hagen00]

You've got two options. I'm assuming 'upload' will hold the image name.

1) Use the server (i.e. PHP)

$extension = substr($_GET['upload' ],strrpos($_GET['upload'],"."));

2) Use the client (i.e. Javascript)

var ext = upload.value.substr(upload.value.lastIndexOf(".")); 

And then check if the extension equals ".gif" or ".jpg"

[n_wattam]

Try this, again the var which contains the file is 'upload' based on this script. Define the extentions you would like in the $types array, and there you have it

	//MIME types to allow, Gif, jpeg, zip ::Edit this to your liking 
	$types = array("application/pdf"); 
	//Check MIME Type 
	if (in_array($_FILES['upload']['type'], $types)){ 
	}