- Post By Li Sen TAN
- 4 years ago
Please advise if any of the following validations may be improved, and/or any part of the codes may be shortened?
<?php
// Check if form was submitted
if(isset($_POST['submit'])) {
// Configure upload directory and allowed file types
$upload_dir = 'uploads/'.DIRECTORY_SEPARATOR;
$allowed_types = array('jpg', 'png', 'jpeg', 'gif');
// Define maxsize for files 64MB, as per php.ini settings
$maxsize = 64 * 1024 * 1024;
// Checks if user sent an empty form
if(!empty(array_filter($_FILES['files']['name']))) {
// Loop through each file in files[] array
foreach ($_FILES['files']['tmp_name'] as $key =--> $value) {
$file_tmpname = $_FILES['files']['tmp_name'][$key];
$file_name = $_FILES['files']['name'][$key];
$file_size = $_FILES['files']['size'][$key];
$file_ext = pathinfo($file_name, PATHINFO_EXTENSION);
// Set upload file path
$filepath = $upload_dir.$file_name;
// Check file type is allowed or not
if(in_array(strtolower($file_ext), $allowed_types)) {
// Verify file size - 2MB max
if ($file_size > $maxsize)
echo "Error: File size is larger than the allowed limit.";
// If file with name already exist then append time in
// front of name of the file to avoid overwriting of file
if(file_exists($filepath)) {
$filepath = $upload_dir.time().$file_name;
if( move_uploaded_file($file_tmpname, $filepath)) {
echo "{$file_name} successfully uploaded <br>";
}
else {
echo "Error uploading {$file_name} <br>";
}
}
else {
if( move_uploaded_file($file_tmpname, $filepath)) {
echo "{$file_name} successfully uploaded <br>";
}
else {
echo "Error uploading {$file_name} <br>";
}
}
}
else {
// If file extension not valid
echo "Error uploading {$file_name} ";
echo "({$file_ext} file type is not allowed)<br>";
}
}
}
else {
// If no files selected
echo "No files selected.";
}
}
?>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Select and upload multiple files to the server</title>
<!-- multipart/form-data ensures that form
data is going to be encoded as MIME data -->
<h2>Upload Files</h2>
<p>Select files to upload:
<!-- name of the input fields are going to
be used in our php script-->
<input type="file" name="files[]" multiple="">
<br><br>
<input type="submit" name="submit" value="Upload">
</p>
