use move_uploaded_file to get uploaded files instead of copy (svn diff), as recommended in the php manual, see http://php.net/move_uploaded_file

This commit is contained in:
Antoine Beaupré 2008-01-22 03:13:54 +00:00
parent ca5137fc7b
commit 7ecbf6d263
1 changed files with 1 additions and 4 deletions

View File

@ -399,17 +399,14 @@ class m_bro {
return false;
}
if (!strpos($_FILES['userfile']['name'],"/")) {
// move_uploaded_file($_FILES['userfile']['tmp_name'], $absolute."/".$_FILES['userfile']['name']);
if (is_uploaded_file($_FILES['userfile']['tmp_name'])) {
if (!file_exists($absolute."/".$_FILES['userfile']['name'])) {
touch($absolute."/".$_FILES['userfile']['name']);
}
copy($_FILES['userfile']['tmp_name'], $absolute."/".$_FILES['userfile']['name']);
move_uploaded_file($_FILES['userfile']['tmp_name'], $absolute."/".$_FILES['userfile']['name']);
} else {
$err->log("bro","uploadfile","Tentative d'attaque : ".$_FILES['userfile']['tmp_name']);
}
// TODO delete this if it works :)
// move_uploaded_file($_FILES['userfile']['tmp_name'], $absolute."/".$_FILES['userfile']['name']);
}
}