php 上传永久图文素材

// 设置上传文件的最大大小
ini_set('upload_max_filesize', '10M');
ini_set('post_max_size', '10M');

// 检查文件类型
$allowed_types = array('jpg', 'jpeg', 'png', 'gif');
$file_ext = strtolower(pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION));
if (!in_array($file_ext, $allowed_types)) {
    die("Invalid file type");
}

// 检查服务器权限
if (!is_writable('uploads/')) {
    die("Upload directory is not writable");
}

// 移动上传的文件到指定目录
$target_dir = "uploads/";
$target_file = $target_dir . basename($_FILES["file"]["name"]);
if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) {
    echo "The file ". htmlspecialchars( basename( $_FILES["file"]["name"])). " has been uploaded.";
} else {
    echo "Sorry, there was an error uploading your file.";
}

// 使用白名单检查文件类型
$allowed_types = array('jpg', 'jpeg', 'png', 'gif');
$file_ext = strtolower(pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION));
if (!in_array($file_ext, $allowed_types)) {
    die("Invalid file type");
}

// 使用随机生成的文件名防止文件名冲突和直接访问
$target_file = $target_dir . uniqid() . '.' . $file_ext;

// 移动上传的文件到指定目录
if (move_uploaded_file($_FILES["file"]["tmp_name"], $target_file)) {
    echo "The file ". htmlspecialchars( basename( $_FILES["file"]["name"])). " has been uploaded.";
} else {
    echo "Sorry, there was an error uploading your file.";
}