simple PHP file upload more secure

Question

I have this (very simple) PHP upload script:

$pic=$_FILES['photo']['name'];
$picc=$_FILES['photo']['tmp_name'];
$tar="".$pic;
move_uploaded_file($picc,$tar);
 $fileName = $_FILES['photo']['name'];

How would I go about making the script die if it isn't an image file, or if it exceeds 1 mb?

Thanks a heck in advance! :)

To check whether file is an image see this question: http://stackoverflow.com/questions/2006632/php-how-can-i-check-if-a-file-is-mp3-or-image-file — pzirkind, Jan 11 '13 at 02:28
@SolèneLeVan My guess would be bytes. Just upload a file you know the size of and print it out. — Supericy, Jan 11 '13 at 04:55

score 1 · Answer 1 · edited May 23 '17 at 11:46

1

To check whether file is an image see this question:

PHP how can i check if a file is mp3 or image file?

To check filesize see this tutorial:

http://www.phpeasystep.com/phptu/3.html

edited May 23 '17 at 11:46

Community

1
1

answered Jan 11 '13 at 02:29

pzirkind

2,338
2
20
25

simple PHP file upload more secure

1 Answers1