I have a page that will allow me to upload a CSV file. Using PHP I then take the contents of the CSV file and insert them into a MySQL database. I've been doing this with no problems for awhile now. Then today, I tried uploading the file and it didn't work. The problem is that there appears to be no file type associated with the CSV file. For example, on a good upload, the debug messages I spit out look like this:
You uploaded a file: buylist_235.csv
file type: application/vnd.ms-excel
file size: 10456
File is valid, and was successfully uploaded. Here is some more debugging info:Array (
[csv] => Array
(
[name] => buylist_235.csv
[type] => application/vnd.ms-excel
[tmp_name] => C:\xampp\tmp\php3C1E.tmp
[error] => 0
[size] => 10456
)
)
However, when I upload the problem file with the debug messages on I noticed the file type and file size is empty.
You uploaded a file: buylist_235_1.csv
file type:
file size: 0
Possible file upload attack!
Here is some more debugging info:Array
(
[csv] => Array
(
[name] => buylist_235_1.csv
[type] =>
[tmp_name] =>
[error] => 2
[size] => 0
)
)
Anyone have any ideas why the file type is empty? In Windows Explorer, if I hover over either of these files the info balloon over the files say "Type: Microsoft Excel Comma Separated Values File". But there is something wrong with the second file that causes my PHP to puke and not recognize the file type.
The file type is not the problem (I don't think).
You'll see error code 2 was returned during the attempted file upload in your second example block, and it was NOT written to temporary storage (tmp_name is empty, size is 0).
You uploaded a file: buylist_235_1.csv
file type:
file size: 0
Possible file upload attack!
Here is some more debugging info:Array
(
[csv] => Array
(
[name] => buylist_235_1.csv
[type] =>
[tmp_name] =>
[error] => 2
[size] => 0
)
)
Error code 2 is: UPLOAD_ERR_FORM_SIZE: The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form.
Adjust this value larger in your form HTML.
Related
I am checking if the file is of mp4 format once a user submits the form, this does not work for me:
if(!($_FILES["videoFile"]["type"] == "video/mp4"))
{
// error handling
}
The file type works for other file types such as png/jpg ect but not for mp4.
echo $_FILES["videoFile"]["type"] = [tmp_name]
echo $_FILES["videoFile"]["name"] = movie_300.mp4
when I print out the array of files i get:
Array ( [videoFile] => Array ( [name] => movie_300.mp4 [type] => [tmp_name] => [error] => 1 [size] => 0 ))
Why is my file type [tmp_name] when uploading mp4s?
You've exceeded your maximum file upload size, see here.
You can increase this using the following directive at the top of your script:
ini_set('upload_max_filesize', '10M'); // set max size to 10M (or whatever)
Here's a neat little function.
http://subinsb.com/php-find-file-mime-type
I'd be careful with your validation because I'm pretty sure mimes can be spoofed fairly easily. Maybe someone with more security experience can weigh in on that subject. I'd at least perform a few other checks.
Cheers!
I'm trying to upload a zip file and a csv file from HTML form.
On PHP, When I printed $_FILES (Actually $request->getFiles() in symfony), I got following.
Array
(
[zipfile] => Array
(
[name] => tempfiles.zip
[type] => application/octet-stream
[tmp_name] => C:\wamp\tmp\php5D42.tmp
[error] => 0
[size] => 850953
)
[csvfile] => Array
(
[name] => test.csv
[type] => application/vnd.ms-excel
[tmp_name] => C:\wamp\tmp\php5D52.tmp
[error] => 0
[size] => 312
)
)
I'm wondering with the type and tmp_name. I need to take few decisions based on type. Is it safe to take decisions on existing type? Will I get same result for similar files on Linux server?
Again tmp_name have .tmp extension. Is it consistent on both windows/linux? If not, is there any way that the code I write on windows (decision using type) will work on linux without any issue?
Using this type can be dangerous Because user can change the type of the files and can upload a php script.
You should validate the type first just like get_image_size() to validate a image file.I have no idea about .zip file
It is not safe to trust the type form $_FILES, you need to validate the file type in server side.
For .tmp extension, it is ok both on windows or linux.
Is there any way to get file size of attempted upload when you get UPLOAD_ERR_INI_SIZE? That is when file being uploaded exceeded upload_max_filesize directive in php.ini.
You may consider using $_SERVER['CONTENT_LENGTH']. It has some overhead and represents the total size of a POST request, but in some situations this will be acceptable.
No.
There´s no way to control PHP core behavior. When a upload fail, the temporary file is deleted, and the array returns an error, without the file size:
Array
(
[uploadedfile] => Array
(
[name] => SManager.chm
[type] =>
[tmp_name] =>
[error] => 1
[size] => 0
)
)
When you go back to move_uploaded_file() or copy(), we dont have the temp file and any other information besides the error, and the name of the origin file.
You can always grab PHP source code, modify it, compile and have this values returned. But, not as a standard.
while uploading MP4 video $_FILES array comes like this..
Array
(
[qqfile] => Array
(
[name] => video.mp4
[type] => video/mpeg4
[tmp_name] => /tmp/php74N9mR
[error] => 0
[size] => 199160
)
)
But while uploading .FLV file $_FILES array coming like this , why it is not coming proper?
Array
(
[qqfile] => Array
(
[name] => YouTube - My Youtube Contest Announcement.flv
[type] =>
[tmp_name] =>
[error] => 1
[size] => 0
)
)
please suggest.
The file you are trying to upload is too large. From the PHP manual's chapter on file uploads:
Since PHP 4.2.0, PHP returns an appropriate error code along with the file array. The error code can be found in the error segment of the file array that is created during the file upload by PHP. In other words, the error might be found in $_FILES['userfile']['error'].
...
UPLOAD_ERR_INI_SIZE
Value: 1; The uploaded file exceeds the upload_max_filesize directive in php.ini.
i think its related to the file name you upload ,
when you call to the php function wrap your file name with ''
I can't understand why my file uploaded through a form that used to be working just fine, is now returning an empty image type. Below is the printed array of $_FILES:
[file] => Array ( [media_image] => Array ( [name] => 001_ac.jpg [type] => [tmp_name] => [error] => 1 [size] => 0 )
According to the File error #1, the file you are uploading is larger than the upload_max_filesize allowed in php.ini. See the error codes in the manual here: http://php.net/manual/en/features.file-upload.errors.php
Hence, the file upload is being rejected, so it hasn't got a size or most of its other normal attributes. Your code can check for such errors and handle them by giving the user feedback, such as informing them of file size restrictions, file types, etc.