Secure Fille Upload

[neodjandre]

Hello,

I am a complete newbie when it comes to PHP. In fact, I have never used it before.

I am ok with html and seem to understand concepts quite fast.

I want to create an upload form where users can upload only .Zip files up to 150MB.

Security is very very very important... I have an SSL certificate but the PHP script needs to be extra secured as well.

As an additional security measure, I want to give my customers a unique number which they should enter in the form before being able to upload.

I also want this unique number to be appended in front of the filename for identification purposes.

any help would do at this stage.

thanks in advance,
Andy

[bpat1434]

I would take a look at generally processing forms. There's not much to securing your scripts except taking your time, and not doing anything stupid like directly using $POST or $GET variables in SQL strings, not using [man]exec/man on any unvalidated input, etc.

If you really want to be secure, pick up Chris Shiflett's book and give it a read.