CGI Script für Uploads

<?php $target_dir = "temp/files/"; if (!file_exists($target_dir)) die("create dir !"); echo ' <html> <head> <title>PHP-Uploader</tile> </head> <body> <h1>PHP-Uploader</h1><br> '; function getFileElement($name, $index = -1) { return(is_array($GLOBALS["_FILES"]["files"][$name])? $GLOBALS["_FILES"]["files"][$name][$index] : $GLOBALS["_FILES"]["files"][$name]); } if ($GLOBALS["_FILES"]["files"]) { for ($index = 0; $index < count($GLOBALS["_FILES"]["files"]); $index++) { if (getFileElement("error", $index) == 0) { $upload_file = getFileElement("tmp_name", $index); $upload_name = getFileElement("name", $index); move_uploaded_file($upload_file, $target_dir.$upload_name); chmod($target_dir.$upload_name, 0750); echo 'File <b>'.$upload_name.'</b> uploaded !<br>'; } } } echo ' <br> <form method="post" enctype="multipart/form-data" action="upload.php"> File 1 : <input type="file" name="files[]" size="20"><br> File 2 : <input type="file" name="files[]" size="20"><br> File 3 : <input type="file" name="files[]" size="20"><br> File 4 : <input type="file" name="files[]" size="20"><br> File 5 : <input type="file" name="files[]" size="20"><br> <br> <input type="submit" value="upload"> </form> </body> </html> '; ?>

<HTML>
<HEAD>
</HEAD>
<BODY>
<?

// Bestand gestuurd? Dan verplaatsen naar juiste dir!
if (isset($_FILES['userfile'])) {
  if (is_uploaded_file($_FILES['userfile']['tmp_name'])) {
    $uploaddir = '/var/...../files/';
    $uploadfile = $uploaddir . basename($_FILES['userfile']['name']);
    echo '<pre>';
    if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
      echo "File is valid, and was successfully uploaded.\n";
    } else {
      echo "Possible file upload attack!\n";
      echo "filename '". $_FILES['userfile']['tmp_name'] . "'.";
      echo 'Here is some more debugging info:';
      print_r($_FILES);
    }
  print "</pre>";
  }
}

// Directory ophalen en laten zien.
$handle= opendir("/home/...../files/");
rewinddir($handle);
while ($file = readdir($handle)) {
  if ($file != "." && $file != "..") {
    $mdir[]= $file;
  }
}
closedir($handle);
if (isset($mdir)) {
  sort ($mdir);
  reset ($mdir);
  while (list ($key, $val) = each ($mdir)) {
    $mtime = filemtime("/home/...../files/" . $val);
    echo '<br>&nbsp;&nbsp;';
    echo gmdate ("d-m-Y H:i", $mtime);
    echo '&nbsp;(GMT)&nbsp;&nbsp;<a href="files/';
    echo $val;
    echo '">';
    echo $val;
    echo '</a>';
    if (strpos(strtolower($val), ".jpg") || strpos(strtolower($val), ".gif") || strpos(strtolower($val), ".png")) {
      echo '&nbsp;&nbsp;<a href="files/';
      echo $val;
      echo '">';
      echo '<img  height="200" align="top" src="files/';
      echo $val;
      echo '"></a><br>';
    }
    echo "\n";
  }
} else {
  echo '<br>No files.';
}  

?>
<BR>
<HR>
New file to upload:<br>
<FORM METHOD="post" ENCTYPE="multipart/form-data" ACTION="index.php">
<INPUT TYPE="hidden" name="MAX_FILE_SIZE" value="2097152">
first select a file:&nbsp;
<INPUT NAME="userfile" TYPE="file">
<p>Send it:&nbsp;
<INPUT TYPE="submit" VALUE="Upload">
</FORM>
</BODY>
</HTML>