Comments on: PHP: Upload Files to the Server

By: dba_boy

dba_boy — Tue, 15 Nov 2011 12:42:04 +0000

I tested, i changed the target path name and it works. :)

By: Robert

Robert — Fri, 12 Aug 2011 07:04:00 +0000

restrict the type of file that can be uploaded and also the file size is a step in the right direction

By: Anonymous

Anonymous — Wed, 24 Feb 2010 22:25:00 +0000

I agree it is a large security flaw as well without restricting access to this Script you have the potential to allow people to upload any file as the script dose NOT check for allowed file types meaning i could upload any type of script under 1000kbs.

thats not all however when using commands that access the file system on your server you should make sure you develop the correct security measures as it gives hackers and other malicious sites the ability to not only modify your website but the file system on the server which can be have disastrous effects for your server.

if you were to use such a script i could simply upload any type of script i like and use your server to make attacks against other peoples servers etc there are many problems with this basic script.

By: Flight

Flight — Thu, 12 Nov 2009 02:38:00 +0000

it is good method to upload small files, but if we need to upload larg files then we need more complex code

thanks

By: Kinox

Kinox — Sun, 05 Oct 2008 05:14:00 +0000

Thanks for sharing the codes.

Btw, there is this “File Thingie” script (free for personal use) that you may want to check out too.

Quote: “It is a small web-based file manager written in PHP. It is intended for those who need to give others access to a part of their server’s file system when FTP is not practical.”

Nope, I’m not related to the author. :)