Gowtham :: Brain Dump v1.0 » Blog Archive » File Uploads Via PHP : Specific MIME Types

Brain Dump v1.0 :: Rambling About Life’s Little Things

« File Upload Via PHP | Current | GMail, IMAP & PINE »

File Uploads Via PHP : Specific MIME Types

2008:06:11 @ 19:14:40 -0500 under HTML, PHP, Showcase

Disclaimer

These instructions/steps worked for me in CentOS 4.0. It may very well work for you on Red Hat-like or other distributions. Please note that if you decide to use these instructions on your machine, you are doing so entirely at your very own discretion and that neither this site, sgowtham.net, nor its author is responsible for any/all damage - intellectual or otherwise.

During my recent, still on-going, attempts to write a personally satisfying photoblog software/application, I happened to learn about File Uploads using PHP and in my previous post, I discussed the general procedure for doing so. There are numerous articles on the web and in the books, but what follows here is what worked for me - it is expected to serve as a Note2Self but if you find it useful, please feel free to do so.

A Form To Select The File

This portion is exactly the same as in previous post but for completeness sake, here it is. Let us suppose that the HTML file that displays this form is called NewFile.html and the PHP file that does the actual uploading work (and some more) is called Uploader.php.

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<body>
 
<!-- The data encoding type, enctype, MUST be specified as below -->
<form enctype="multipart/form-data" action="Uploader.php" method="POST">
  <table align="left" cellpadding="5" cellspacing="5" border="0" width="100%">
    <tr>
      <td align="left" valign="top">
        Select A File
      </td>
 
      <td align="left" valign="top">
        <!-- MAX_FILE_SIZE (measured in bytes) must precede the file input field and its value 
        is the maximum filesize accepted by PHP. Fooling this setting on the browser side is 
        quite easy, so never rely on files with a greater size being blocked by this feature. 
        The PHP settings for maximum-size, however, cannot be fooled. This form element 
        should always be used as it saves users the trouble of waiting for a big file being 
        transferred only to find that it was too big and the transfer failed. -->
        <input type="hidden" name="MAX_FILE_SIZE" value="4194304">
 
        <!-- Name of input element determines name in $_FILES array.
        uploaded_file is the reference assigned in the form. This will be needed to 
        tell the $_FILES array which file should be handled -->
        <input name="uploaded_file" type="file">
      </td>
    </tr>
 
    <tr>
      <td align="left" valign="top">
        &nbsp;
      </td>
 
      <td align="left" valign="top">
        <input type="submit" value="Upload This File">
      </td>
    </tr>
  </table>
</form>
 
</body>
</html>

Uploader.php

Suppose that the end-user selected a file to upload and hit the Upload This File button. Now, the file, Uploader.php takes over and does a few things. But let us suppose that only image file types (JPEG, GIF, PNG) are to be allowed as uploadable types. Let us also suppose that the image file so uploaded needs to be thumbnailed and put in a folder called thumbnails (located under the uploads folder). The source code follows:

<?php
# Some other MIME types are as follows
# $_FILES['uploaded_file']['type'] == 'application/pdf'
# $_FILES['uploaded_file']['type'] == 'application/xml'  
if ((($_FILES['uploaded_file']['type'] == 'image/gif')    ||
     ($_FILES['uploaded_file']['type'] == 'image/png')    ||
     ($_FILES['uploaded_file']['type'] == 'image/jpeg')   ||
     ($_FILES['uploaded_file']['type'] == 'image/pjpeg')) &&
     ($_FILES['uploaded_file']['size'] < 4194304)) {
 
  if ($_FILES['uploaded_file']['error'] > 0) {
    # The error code  associated with this file upload.
    echo "Error: "     . $_FILES['uploaded_file']['error'] . "<br>";
  } else {
    # The original name of the file on the client machine.
    echo "Upload: "    . $_FILES['uploaded_file']['name'] . "<br>";
 
    # The mime type of the file, if the browser provided this information. 
    # This mime type is however not checked on the PHP side and therefore it's value should
    # should not be taken for granted.
    echo "Type: "      . $_FILES['uploaded_file']['type'] . "<br>";
 
    # The size, in bytes, of the uploaded file.
    echo "Size: "      . ($_FILES['uploaded_file']['size'] / 1024) . " kB<br>";
 
    # The temporary filename of the file in which the uploaded file was stored on the server.
    echo "Stored in: " . $_FILES['uploaded_file']['tmp_name'] . "<br>";
 
    # Where the file is going to be placed and thumbnail will be creatd; choose this judiciously
    # These locations needs to have 'write' permissions for 'apache' (or the web-user)
    $target_path       = "tmp/";
    $target_thumb_path = "$target_path/thumbnails/";
 
    if(!is_writable($target_path)) {
      die('Cannot be uploaded to the specified directory. Please change permission  to 777.');
    }
 
    if(!is_writable($target_thumb_path)) {
      die('Thumbnail cannot be created in the specified directory. Please change permission  to 777.');
    }
 
    # This is the temporary file created by PHP
    $uploaded_file = $_FILES['uploaded_file']['tmp_name'];
    $target_path   = $target_path . basename( $_FILES['uploaded_file']['name']);
 
    # Create an image from the $uploaded_file so that it can be thumbnailed
    $src = imagecreatefromjpeg($uploaded_file);
 
    # Extract the original size of the uploaded image
    list($width, $height)=getimagesize($uploaded_file);
 
    # Let the thumbnail be 150 pixels in width, height adjusted based on original aspect ratio
    $new_width   = 150;
    $new_height  = ($height/$width)*$new_width;
    $tmp         = imagecreatetruecolor($new_width, $new_height);
 
    # The following line does the thumbnailing
    imagecopyresampled($tmp, $src, 0, 0, 0, 0, $new_width, $new_height, $width, $height);
 
    # Write the thumbnailed image to disk
    # Check/modify this part for other image types
    $filename = $target_thumb_path . $_FILES['uploaded_file']['name'];
    imagejpeg($tmp, $filename, 100);
 
    # PHP will clean up the temporary files after the request is completed
    imagedestroy($src);
    imagedestroy($tmp)
 
    if(move_uploaded_file($_FILES['uploaded_file']['tmp_name'], $target_path)) {
      echo "The file " .  basename( $_FILES['uploaded_file']['name']) . " has been uploaded";
    } else{
      echo "There was an error uploading the file, please try again!";
    }
  }
} else {
  echo "Invalid file type!";
}
?>

Most Comments From:

MarwaDi (30)	Soumya (24)	Santosh (21)	Surya (17)
Padma (14)	Vathsa (14)	Amy (13)	Chong (12)
Kyle Schneider (12)	Akira (10)	Sumana (9)	Prashanth (8)
Sree (8)	Lakshmi (7)	Deepa Mohan (4)	Karen (4)