Getting the file extension of an uploaded image?

7724

I have a script which takes a file, renames it to the current time and uploads it. Now here's the key bit for uploading:

   if (!empty($_FILES['ufile']['name'][0]))
   {
      $picunique = time();
      $picture = "files/$picunique";
      move_uploaded_file ($_FILES['ufile']['tmp_name'][0], $picture);
   }

As you can see if the upload field is not empty I take the file and change the filename to the current time and moves the picture, which works great.

But i'm using the script to upload a variery of files ie a jpg, pdf etc...

So when I'm re-naming the file is there a way I can keep the file extension on the end that's on the original? ie so it's renamed to the time().jpg or time().pdf (ie whatever filetype was uploaded?)

Thanks

NogDog

You can use [man]pathinfo/man to get the extension.

sneakyimp

There could be a security risk in trusting uploads. What might be named xyz.jpg could actually be an exe file or some other form of malicious code. You might want to try something like the Fileinfo pecl extension to verify the file types.

bradgrafelman

Or just do something simple, such as check if [man]getimagesize/man could determine an image size or not.

NogDog

bradgrafelman;10910548 wrote:
Or just do something simple, such as check if [man]getimagesize/man could determine an image size or not.

Though the OP suggested it's not just image files (PDF was mentioned). But it all depends on the purpose of those files and how much responsibility you want to take on ensuring their safety (run a server-side virus scan?) or let it be caveat emptor to whomever downloads them.