[RESOLVED] File Upload only takes certain file extensions

jasonyoung

I've used this to upload in the past where only PDF's were accepted. Now I need to accept more files so I made the validation check that it is != xxx. This seems to work well for known file types like .txt and .pdf, but a Visio file with a .vsd fails to move to the uploads directory. Any ideas?

The code:

	if ($sequence == "8675309") {
		$filename = $_FILES['file']['name']; 
		$uploaddir = "../uploads/".$masterUid."_";
			if (pathinfo($filename, PATHINFO_EXTENSION) != "xxx") { // Check Entension 
				$uploadfile = $uploaddir . $filename; 
				echo "Upload:      " . $_FILES["file"]["name"] . "<br />";
				echo "Uploaded By: " . $logname . "<br />";
    			echo "Type:        " . $_FILES["file"]["type"] . "<br />";
	    		echo "Size:        " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
	    		echo "Temp file:   " . $_FILES["file"]["tmp_name"] . "<br />";
				if (move_uploaded_file($_FILES['file']['tmp_name'], $uploadfile)) { 
					$feedback = "File upload was successful";
					$query = "INSERT INTO uploads (oracle,identifier, active, path, filename, randomId, uploaded, uploadedBy)
					  		  VALUES ('$string','$index','1','$uploaddir','$filename','$randomId',NOW(),'$logname')";

				$result = mysql_query($query) or die (mysql_error());
				echo $feedback;
			}
		}
	}

sheephat

jasonyoung wrote:

The code:

	if ($sequence == "8675309") {
		$filename = $_FILES['file']['name']; 
		$uploaddir = "../uploads/".$masterUid."_";
			$uploadfile = $uploaddir . $filename; 
				echo "Upload:      " . $_FILES["file"]["name"] . "<br />";
				echo "Uploaded By: " . $logname . "<br />";
    			echo "Type:        " . $_FILES["file"]["type"] . "<br />";
	    		echo "Size:        " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
	    		echo "Temp file:   " . $_FILES["file"]["tmp_name"] . "<br />";
				if (move_uploaded_file($_FILES['file']['tmp_name'], $uploadfile)) { 
					$feedback = "File upload was successful";
					$query = "INSERT INTO uploads (oracle,identifier, active, path, filename, randomId, uploaded, uploadedBy)
					  		  VALUES ('$string','$index','1','$uploaddir','$filename','$randomId',NOW(),'$logname')";

				$result = mysql_query($query) or die (mysql_error());
				echo $feedback;
			}

	}

Can you not just remove the if statement as above^

jasonyoung

Doh! The php.ini had a max file size of 2M and the Visio was 2.6M. Changed and restarted. Tested good.