Alphabetical File Sort Script

Pandemonium

Aug 24 2004, 04:46 PM

Okay, this script takes in an uploaded file from a form, adds it to the web server, and then it adds it to the correct alphabetical letter directory (ie. Active would go in the a directory). The only use I see for it would be for making it easier to find something when it is uploaded. This script takes two .php files: upload.php and upload-check.php. If you are going to use the script, you can rename those files to whatever you want. So, here's the script. Use it at your own discretion (as always).

upload.php

CODE

<?php

echo "<form action = 'upload-check.php' method='post' enctype='multipart/form-data'>";
echo "<input type = 'text' name='nameOfFile'>";
echo "<input type = 'file' name='uploadFile'>";
echo "<input type = 'submit' value = 'Send'>";
echo "</form>";

?>

upload-check.php

CODE

<?php

$letterArray = array('a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', 'p', 'q',
'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z');

$arraySize = array_count_values($letterArray);

for($n = 0; $n <= $arraySize; $n++)
{
if(!is_dir($n))
{
mkdir('somefolder/' . $n, 0666);
}
}

if(strlen($_POST['nameOfFile']) > 1 and substr($_FILES['uploadFile'], -4) != '.exe')
{
for($i = 0; $i <= $arraySize; $i++)
{
if(substr($_FILES['nameOfFile'], 1) == $i)
{
$tmpFile = $_FILES['uploadFile']['tmp_name'];
$dest = "http://yourwebsite.com/somefolder/" . $i . "/" .
$_FILES['uploadName']['name'];
copy($tmpFile, $dest);
}
}
}
else
{
echo "Sorry, but your file name was either too short or it had an invalid file
extension. Please go back and try again.";
}

?>

Reply

Spectre

Aug 24 2004, 06:01 PM

It's just an idea, but I generally like to keep all of it together in a single file. You could achieve this by combining the scripts as shown below, but ensuring that only one portion is executed at a time (hence the need for the use of the if statement, and the exit function).

CODE

<?php

if(!isset($_POST['uploadFile'])) {
echo "<form action = 'upload.php' method='post' enctype='multipart/form-data'>";
echo "<input type = 'text' name='nameOfFile'>";
echo "<input type = 'file' name='uploadFile'>";
echo "<input type = 'submit' value = 'Send'>";
echo "</form>";
exit;
}

$letterArray = array('a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', 'p', 'q',
'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z');

$arraySize = array_count_values($letterArray);

for($n = 0; $n <= $arraySize; $n++)
{
if(!is_dir($n))
{
mkdir('somefolder/' . $n, 0666);
}
}

if($_POST['nameOfFile'] < 1 and substr($_FILES['uploadFile'], -4) != '.exe')
{
for($i = 0; $i <= $arraySize; $i++)
{
if(substr($_FILES['nameOfFile'], 1) == $i)
{
$tmpFile = $_FILES['uploadFile']['tmp_name'];
$dest = "http://yourwebsite.com/somefolder/" . $i . "/" .
$_FILES['uploadName']['name'];
copy($tmpFile, $dest);
}
}
}
else
{
echo "Sorry, but your file name was either too short or it had an invalid file
extension. Please go back and try again.";
}

?>

Reply

Pandemonium

Aug 24 2004, 06:20 PM

Good point, Spectre. I suppose I forgot about the is_set() function. Thanks for the
"improvement".

Reply

Triple X

Aug 24 2004, 06:22 PM

Hm interesting, good work. I should keep this in mind for when I get my sub-domain.

Reply

Zenchi

Aug 25 2004, 12:22 AM

I was just curious, but what is the reason to exclude exes? (Or am I reading this wrong? ^^;)

CODE

if($_POST['nameOfFile'] < 1 and substr($_FILES['uploadFile'], -4) != '.exe')

Reply

Pandemonium

Aug 25 2004, 01:00 AM

QUOTE(Zenchi @ Aug 24 2004, 08:22 PM)

I was just curious, but what is the reason to exclude exes? (Or am I reading this wrong? ^^

CODE

if($_POST['nameOfFile'] < 1 and substr($_FILES['uploadFile'], -4) != '.exe')

I excluded .exe as an example. It just shows you how to protect against certain file types. I just chose .exe randomly.

Reply

Zenchi

Aug 25 2004, 01:06 AM

QUOTE(Pandemonium @ Aug 24 2004, 08:00 PM)

QUOTE(Zenchi @ Aug 24 2004, 08:22 PM)

I was just curious, but what is the reason to exclude exes? (Or am I reading this wrong? ^^

CODE

if($_POST['nameOfFile'] < 1 and substr($_FILES['uploadFile'], -4) != '.exe')

I excluded .exe as an example. It just shows you how to protect against certain file types. I just chose .exe randomly.

Ah.. that's very neat.

I'm going to go disect that part of the code and figure out what it does. ^^

Reply

Spectre

Aug 25 2004, 04:44 AM

As for the first part:

CODE

if($_POST['nameOfFile'] < 1

I would assume that is to check that $_POST['nameOfFile'] (which is passed to the script from the form) does actually have a value. The fact that an integer comparison is used sort of makes it a little confusing though. I would have used either:

CODE

if($_POST['nameOfFile'])
// (because if a variable has an assigned value, then it will be returned as true) or
if($_POST['nameOfFile'] != ""
// or
if(isset($_POST['nameOfFile'])

But that's just me.

CODE

substr($_FILES['uploadFile'], -4) != '.exe'

This uses the substr(); function to select the last 4 characters of the filename entered, and then makes sure that are not '.exe'. Substr(); is used to select a certain portion of a string, eg:

CODE

substr("My name is Spectre", 3)

Will select all of the characters, starting at postion 3, so it would become 'name is Spectre'. Using a negative integer, eg. -4, will select the last -4 characters of the string.

In an IF statement, 'x == y' means that 'x' is equal to 'y' (double equals sign is intentional), and 'x != y' means that 'x' is not equal to 'y'.

Hope that sort of explains it for you.

Checking the filename is certainly a good idea, but a binary check would be much more secure.

Reply

Pandemonium

Aug 25 2004, 04:00 PM

QUOTE(Spectre @ Aug 25 2004, 12:44 AM)

As for the first part:

CODE

if($_POST['nameOfFile'] < 1

I would assume that is to check that $_POST['nameOfFile'] (which is passed to the script from the form) does actually have a value. The fact that an integer comparison is used sort of makes it a little confusing though. I would have used either:

CODE

if($_POST['nameOfFile'])
// (because if a variable has an assigned value, then it will be returned as true) or
if($_POST['nameOfFile'] != ""
// or
if(isset($_POST['nameOfFile'])

But that's just me.

CODE

substr($_FILES['uploadFile'], -4) != '.exe'

This uses the substr(); function to select the last 4 characters of the filename entered, and then makes sure that are not '.exe'. Substr(); is used to select a certain portion of a string, eg:

CODE

substr("My name is Spectre", 3)

Will select all of the characters, starting at postion 3, so it would become 'name is Spectre'. Using a negative integer, eg. -4, will select the last -4 characters of the string.

In an IF statement, 'x == y' means that 'x' is equal to 'y' (double equals sign is intentional), and 'x != y' means that 'x' is not equal to 'y'.

Hope that sort of explains it for you.

Checking the filename is certainly a good idea, but a binary check would be much more secure.

Spectre, about $_POST['nameOfFile'] < 1. I forgot 2 things here: First, it was supposed to be strlen($_POST['nameOfFIle']) < 1, and second, it's not supposed to be < 1, it's supposed to be > 1. I made two mistakes in that piece of code. Sorry about that.

Reply

ADD REPLY / Got an Opinion!	Remove these ADs!	RAPID SEARCH!	Free Web Hosting	[X]
Express your Opinions, Thoughts or Contribute more info. to help others. Ask your Doubts & Queries to get answers, So that "Together We can help others!"	Register FREE for AD-FREE forum, Create your own topics, Ask Questions, track topics, setup subscriptions & notifications and Get a Free Website w/ Email and FTP.		500MB Space No Ads, CPanel, FTP, PHP, MySQL, EMails - 100% FREE