5

我只是想上传一个文件,但没有任何效果。

 <!DOCTYPE html>
 <html><body>

            <form id="exp" enctype = "multipart/form-data" action="../cgi-bin/uploadPic.php">
                <input type="file" id="profilePic2" name="newPic"></input> <br /><br /><br />
                <input type="submit" value="Upload Pic" style="color:black;"></input>
            </form>
  </body></html>

我的 php 文件正在执行。请注意草率的代码,我正在尝试通过 echo 进行调试。

 <html>
 <body>
 <?php

$loadFile = true; // error code
$allowedExts = array("jpg","jpeg","gif","png");
$extension = end(explode(".", $_FILES["newPic"]["name"]));

$file = $_FILES["newPic"];
$picIncluded = false;

if((    ($_FILES["newPic"]["type"] == "image/gif")
||  ($_FILES["newPic"]["type"] == "image/jpeg")
||  ($_FILES["newPic"]["type"] == "image/png")
||  ($_FILES["newPic"]["type"] == "image/pjpeg"))
&&  ($_FILES["newPic"]["size"] < 5000000)
&&  in_array($extension, $allowedExts)){
    if($_FILES["newPic"]["error"] > 0){
        echo "pnl"; // error code returned to client
    }
    else if(file_exists("../profile-pics/" . $file["name"])){
        echo "pld"; // picture loaded duplicate
    } else {
        $picIncluded = true;
        echo "finally";
        if(move_uploaded_file($file["name"]["tmp_name"],"./" . $file["name"])){
            echo "Success again!";
        }
        $path = "../profile-pics/" . $file["name"];
    }
}
if(is_uploaded_file($_FILES["newPic"]["name"]["tmp_name"])){
    echo "Good news!";
}

 ?>

 </body>
 </html>

无论如何,函数 move_uploaded_file() 正在返回 false,因为它找不到临时文件。is_uploaded_file() 也返回 false。我的扩展和一切都是正确的,但仍然无济于事,没有上传文件。我该如何调试呢?

4

2 回答 2

5

改变这个

if(move_uploaded_file($file["name"]["tmp_name"],"./" . $file["name"])){

if(move_uploaded_file($file["tmp_name"],"./" . $file["name"])){

因为你已经分配

$file = $_FILES["newPic"];
于 2013-03-13T05:03:36.800 回答
2

同样为了安全检查,您必须在上传前检查 is_uploaded_file() :

if(is_uploaded_file($_FILES["newPic"]["tmp_name"])){
 if(move_uploaded_file($_FILES["newPic"]["tmp_name"],"../profile-pics/" . $file["name"])){
  echo 'file uploaded...';
 }
}else{
  echo "Possible file upload attack: ";
}
于 2013-03-13T05:10:59.003 回答