Upload на файлове

Pro_Lamer4e

Registered
как ще стане да неможе да се качват др файлове освен рар и зип

include "connect.php";
if(isset($_POST['submit']))
{
$name = htmlspecialchars($_POST['name']);
$author = htmlspecialchars($_POST['author']);
$uploader = htmlspecialchars($_COOKIE['username']);
$description = htmlspecialchars($_POST['description']);
$kategoria = htmlspecialchars($_POST['kategoria']);
if($name == NULL || $author == NULL || $description == NULL)
{
echo "Не сте попълнили всички полета!";
}
else{
if ($_FILES["file"]["error"] > 0)
{
echo "Код на грешката: " . $_FILES["file"]["error"] . "<br />";
}
else
{
if (file_exists("../upload/" . $_FILES["file"]["name"]))
{
echo $_FILES["file"]["name"] . "<br>";
}
else
{
move_uploaded_file($_FILES["file"]["tmp_name"],
"upload/" . $_FILES["file"]["name"]);
}
}
$link = $_FILES["file"]["name"];
mysql_query("INSERT INTO files (kategoria,name,author,uploader,link,description) VALUES ('$kategoria','$name','$author','$uploader','$link','$description')") or die (mysql_query());
echo "Файла е качен успешно!";
echo '<META HTTP-EQUIV="Refresh" CONTENT="1; URL=upload_plugin.php">';
}
}
 
PHP:
<?php
$site_link = "http://styl3r.erhost.org";
$sait = "http://styl3r.erhost.org";
$upload_dir = "upload/"; //Може да се смени с друга папка , която вие си пожелаете
$snimkata = $site_link."/".$upload_dir."".$new_file_name;
$size_bytes = 9072000; //Големината на файла в bytes (сега 3МБ)3072000
$extlimit = "yes"; //Да има лимит или не за качване(yes/no)
$limitedext = array(".rar",".zip",".mp3",".jpg",".png",".avi",".psd",".gif"); 
if (!is_dir("$upload_dir")) {
die ("<img src='images/no.png'/> Папката <b>($upload_dir)</b> не съществува
</div>
	</div>
	
<div id='sidebar'>
		<div class='sidebarheader'>Приятели</div>
		<div class='content'>
		<div class='newsdate'></div>
<li><a href='http://erhost.org'>Erhost.ORG</a></li>
<li><a href='http://styl3r.info'>Styl3r.INFO</a></li>
<li><a href='http://Asenov.NET'>Asenov.NET</a></li>
<br></p>
		</div></div>
	
	<div id='footer'>
    
          
		<div id='footerleft'>2010 © Free file hosting </div>
		<div id='footerright'>
<script type='text/javascript' src='http://cnt.wstats.org/s/cnt.js?id=10347&im=14.no_text'></script>
<noscript><a href='http://wstats.org/10347'><img src='http://cnt.wstats.org/?s=10347&img=14&no_text&js=0' style='border:0px;'/></a></noscript>

</div>
	</div>
</div>
</body>
</html>
");
}

if(isset($_POST['uploadform'])){


$file_tmp = $_FILES['filetoupload']['tmp_name'];
$file_name = $_FILES['filetoupload']['name'];
$file_size = $_FILES['filetoupload']['size'];

if (!is_uploaded_file($file_tmp)){
echo "<img src='images/no.png'/> Моля изберете файл за качване!. <br>»<a href=\"$_SERVER[PHP_SELF]\">НАЗАД</a>
</div>
	</div>
	
<div id='sidebar'>
		<div class='sidebarheader'>Приятели</div>
		<div class='content'>
		<div class='newsdate'></div>
<li><a href='http://erhost.org'>Erhost.ORG</a></li>
<li><a href='http://styl3r.info'>Styl3r.INFO</a></li>
<li><a href='http://Asenov.NET'>Asenov.NET</a></li>
<br></p>
		</div></div>
	
	<div id='footer'>
    
          
		<div id='footerleft'>2010 © Free file hosting </div>
		<div id='footerright'>
<script type='text/javascript' src='http://cnt.wstats.org/s/cnt.js?id=10347&im=14.no_text'></script>
<noscript><a href='http://wstats.org/10347'><img src='http://cnt.wstats.org/?s=10347&img=14&no_text&js=0' style='border:0px;'/></a></noscript>

</div>
	</div>
</div>
</body>
</html>

";
exit(); 
}

if ($file_size > $size_bytes){
echo "<img src='images/no.png'/> Файла е твърде голям. Той трябва да бъде под <b>". $size_bytes / 1024 ."</b> KB. <br>»<a href=\"$_SERVER[PHP_SELF]\">НАЗАД</a>
</div>
	</div>
	
<div id='sidebar'>
		<div class='sidebarheader'>Приятели</div>
		<div class='content'>
		<div class='newsdate'></div>
<li><a href='http://erhost.org'>Erhost.ORG</a></li>
<li><a href='http://styl3r.info'>Styl3r.INFO</a></li>
<li><a href='http://Asenov.NET'>Asenov.NET</a></li>
<br></p>
		</div></div>
	
	<div id='footer'>
    
          
		<div id='footerleft'>2010 © Free file hosting </div>
		<div id='footerright'>
<script type='text/javascript' src='http://cnt.wstats.org/s/cnt.js?id=10347&im=14.no_text'></script>
<noscript><a href='http://wstats.org/10347'><img src='http://cnt.wstats.org/?s=10347&img=14&no_text&js=0' style='border:0px;'/></a></noscript>

</div>
	</div>
</div>
</body>
</html>
";
exit();
}

$ext = strrchr($file_name,'.');
if (($extlimit == "yes") && (!in_array(strtolower($ext),$limitedext))) {
echo("<img src='images/no.png'/> Този тип файл не е позволен за качване.<br>»<a href=\"$_SERVER[PHP_SELF]\">НАЗАД</a> 
</div>
	</div>
	
<div id='sidebar'>
		<div class='sidebarheader'>Приятели</div>
		<div class='content'>
		<div class='newsdate'></div>
<li><a href='http://erhost.org'>Erhost.ORG</a></li>
<li><a href='http://styl3r.info'>Styl3r.INFO</a></li>
<li><a href='http://Asenov.NET'>Asenov.NET</a></li>
<br></p>
		</div></div>
	
	<div id='footer'>
    
          
		<div id='footerleft'>2010 © Free file hosting </div>
		<div id='footerright'>
<script type='text/javascript' src='http://cnt.wstats.org/s/cnt.js?id=10347&im=14.no_text'></script>
<noscript><a href='http://wstats.org/10347'><img src='http://cnt.wstats.org/?s=10347&img=14&no_text&js=0' style='border:0px;'/></a></noscript>

</div>
	</div>
</div>
</body>
</html>
");
exit();
}
$random_digit=rand(00000,99999);
$new_file_name=$random_digit.$ext;

/// Далй има такъв файл
if(file_exists($upload_dir.$file_name)){
echo "<img src='images/no.png'/> Името на файла <b>$file_name</b> вече е заето. <br>»<a href=\"$_SERVER[PHP_SELF]\">НАЗАД</a>
</div>
	</div>
	
<div id='sidebar'>
		<div class='sidebarheader'>Приятели</div>
		<div class='content'>
		<div class='newsdate'></div>
<li><a href='http://erhost.org'>Erhost.ORG</a></li>
<li><a href='http://styl3r.info'>Styl3r.INFO</a></li>
<li><a href='http://Asenov.NET'>Asenov.NET</a></li>
<br></p>
		</div></div>
	
	<div id='footer'>
    
          
		<div id='footerleft'>2010 © Free file hosting </div>
		<div id='footerright'>
<script type='text/javascript' src='http://cnt.wstats.org/s/cnt.js?id=10347&im=14.no_text'></script>
<noscript><a href='http://wstats.org/10347'><img src='http://cnt.wstats.org/?s=10347&img=14&no_text&js=0' style='border:0px;'/></a></noscript>

</div>
	</div>
</div>
</body>
</html>

";
exit();
}
$sait = "http://styl3r.erhost.org";
$new_file_name=$random_digit.$ext;
$snimkata = $site_link."/".$upload_dir."".$new_file_name;
$new_file_name = str_replace(' ', '_', $new_file_name);
if (move_uploaded_file($file_tmp,$upload_dir.$new_file_name)) {
echo "
<img src='images/ok1.png'/>
Линкът към файла е
<br>
<input type=\"text\" readonly='readonly' value='".$snimkata."' size=\"50\"><br>
Ако е снимка <img src='$snimkata'/><br />
Ако е песен <object type='application/x-shockwave-flash' data='player/player.swf' id='audioplayer2' height='24' width='290'>
            <param name='movie' value='player/player.swf'>
            <param name='FlashVars' value='playerID=audioplayer2&soundFile=".$snimkata." '>
            <param name='quality' value='high'>
            <param name='menu' value='true'>
            <param name='wmode' value='transparent'>
        </object>  </div>
Ако е rar,psd и др. <a href='".$snimkata."'><img src='http://prikachi.com/images/625/2352625w.png'/></a><br />
<hr class='cut' />
Кодове за форуми:<br />
<textarea title='За снимки' style='background-color:#1321sad;width:90%' readonly='readonly' rows='1' cols='65'>[url=".$snimkata."][img]".$snimkata."[/img][/url]</textarea>
<textarea title='За всичко друго' style='background-color:#1321sad;width:90%' readonly='readonly' rows='1' cols='65'>[url=".$snimkata."][img]http://prikachi.com/images/625/2352625w.png[/img][/url]</textarea>
<hr class='cut' />
Кодове за сайтове:<br />
<textarea title='За снимки' style='background-color:#1321sad;width:90%' readonly='readonly' rows='1' cols='65'><a href='".$snimkata."'><img src='".$snimkata."'/></a></textarea>
<textarea title='За всичко друго' style='background-color:#1321sad;width:90%' readonly='readonly' rows='1' cols='65'><a href='".$snimkata."'><img src='http://prikachi.com/images/625/2352625w.png'/></a></textarea>

</div>
	</div>
	
<div id='sidebar'>
		<div class='sidebarheader'>Приятели</div>
		<div class='content'>
		<div class='newsdate'></div>
<li><a href='http://erhost.org'>Erhost.ORG</a></li>
<li><a href='http://styl3r.info'>Styl3r.INFO</a></li>
<li><a href='http://Asenov.NET'>Asenov.NET</a></li>
<br></p>
		</div></div>
	
	<div id='footer'>
    
          
		<div id='footerleft'>2010 © Free file hosting </div>
		<div id='footerright'>
<script type='text/javascript' src='http://cnt.wstats.org/s/cnt.js?id=10347&im=14.no_text'></script>
<noscript><a href='http://wstats.org/10347'><img src='http://cnt.wstats.org/?s=10347&img=14&no_text&js=0' style='border:0px;'/></a></noscript>

</div>
	</div>
</div>
</body>
</html>
";
exit();
}
}else{
for($i=0;$i<count($limitedext);$i++){
if (($i<>count($limitedext)-1))$commas=", ";else $commas="";
list($key,$value)=each($limitedext);
$all_ext .= $value.$commas;
}

echo "
<form name=\"Upload\" method=\"post\" action=\"\" enctype=\"multipart/form-data\" >
<input type=\"file\" name=\"filetoupload\"  class=\"up\" size=\"45\">
<input type=\"hidden\" name=\"MAX_FILE_SIZE\" value=\"$size_bytes\"><br>
<input type=\"Submit\"  value=\"Качване\" name=\"uploadform\"> 
</form>
<b>Позволени формати: .rar,.zip,.mp3,.avi,.psd,.jpg,.png,.gif</b>";
}

?>
 
Пробвай така
PHP:
<?php

include "connect.php";
if (isset($_POST['submit'])) {
    $name = htmlspecialchars($_POST['name']);
    $author = htmlspecialchars($_POST['author']);
    $uploader = htmlspecialchars($_COOKIE['username']);
    $description = htmlspecialchars($_POST['description']);
    $kategoria = htmlspecialchars($_POST['kategoria']);
    $allow = array('jpg', 'gif', 'png', 'zip', 'rar');
    $allowfile = end(explode('.', $_FILES['file']['name']));
    $allowfile = strtolower($allowfile);
    if ($name == NULL || $author == NULL || $description == NULL) {
        echo "Не сте попълнили всички полета!";
    } else {
        if ($_FILES["file"]["error"] > 0) {
            echo "Код на грешката: " . $_FILES["file"]["error"] . "<br />";
        } else {
            if (file_exists("../upload/" . $_FILES["file"]["name"])) {
                echo $_FILES["file"]["name"] . "<br>";
            } else {
                if (in_array(allowfile, $allow)) {
                    move_uploaded_file($_FILES["file"]["tmp_name"],
                            "upload/" . $_FILES["file"]["name"]);
                } else {
                    $error = "Позволени са само форматите: <b>jpg</b>, <b>png</b>, <b>gif</b>, <b>zip</b>, <b>rar</b>";
                }
            }
        }
        $link = $_FILES["file"]["name"];
        mysql_query("INSERT INTO files (kategoria,name,author,uploader,link,description) VALUES ('$kategoria','$name','$author','$uploader','$link','$description')") or die(mysql_query());
        echo "Файла е качен успешно!";
        echo '<META HTTP-EQUIV="Refresh" CONTENT="1; URL=upload_plugin.php">';
    }
}
?>
 

Back
Горе