Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 
6294 posts

Uber Geek
+1 received by user: 377

Moderator
Trusted
Subscriber

  Reply # 402272 9-Nov-2010 17:57
Send private message

hamisht: The file needs to re-named while being uploaded, or after uploading, because someone might upload 'photo1.jpg' and overwrite someone elses 'photo1.jpg'.


I would put all the images in a folder (such as /images) then put each user's images in a subfolder (such as images/15/ or images/10/) then there's no worries with overwriting.



349 posts

Ultimate Geek
+1 received by user: 7


  Reply # 402589 10-Nov-2010 10:32
Send private message

Thanks for that suggestion nate, but I don't want to complicate things any further ;)

Good news though, the renaming is working! yay!




 
 
 
 


245 posts

Master Geek


  Reply # 402599 10-Nov-2010 10:35
Send private message

hamisht: Thanks for that suggestion nate, but I don't want to complicate things any further ;)

Good news though, the renaming is working! yay!


Awesome Sauce :)




Load & Performance Tester/PHP/JSP/C/PERL/MYSQL/LoadRunner8->11/HTML/CSS/XML/XSLT/2B|!2B/Cervelo Soloist/EMC Equip4/ Samsung Galaxy S /Darkys 10.2 Extreme

Do androids dream of electric sheep?
use strict;
my $sheepCount;

Yes, they can.

Go Hawks!
782 posts

Ultimate Geek
+1 received by user: 30

Trusted
Subscriber

  Reply # 414336 7-Dec-2010 22:35
Send private message

Very snip-happy:

hamisht: this is my page 'uploadimages.php':

  
    $newcatagory = $_POST['newcatagory'];
       
    // RECORD INPUT
    $emailupload = $_POST['emailupload'];
    $description = $_POST['description'];
    $date = $_POST['date'];



Don't forget to mistrust ALL data that comes from the browser - put in some checking / validation / cleansing on the input to ensure that some clown doesn't set the $_POST['newcatagory'] to something like "; drop table catagory; --"

(Hint - mysql_escape_string())

Another option may be to use either an abstraction layer (ADODB) or mysqli commands.

Did I also mention that you should never trust the data from the browser ... 

1 | 2 
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Propel launch Disney Star Wars Laser Battle Drones
Posted 19-Nov-2017 21:26


UFB killer app: Speed
Posted 17-Nov-2017 17:01


The case for RSS — MacSparky
Posted 13-Nov-2017 14:35


WordPress and Indieweb: Take control of your online presence — 6:30 GridAKL Nov 30
Posted 11-Nov-2017 13:43


Chorus reveals technology upgrade for schools, students
Posted 10-Nov-2017 10:28


Vodafone says Internet of Things (IoT) crucial for digital transformation
Posted 10-Nov-2017 10:06


Police and Facebook launch AMBER Alerts system in NZ
Posted 9-Nov-2017 10:49


Amazon debuts Fire TV Stick Basic Edition in over 100 new countries
Posted 8-Nov-2017 05:34


Vodafone VoIP transition to start this month
Posted 7-Nov-2017 12:33


Spark enhances IoT network capability
Posted 7-Nov-2017 11:33


Vocus NZ sale and broadband competition
Posted 6-Nov-2017 14:36


Hawaiki reaches key milestone in landmark deep-sea fibre project
Posted 4-Nov-2017 13:53


Countdown launches new proximity online shopping app
Posted 4-Nov-2017 13:50


Nokia 3310 to be available through Spark New Zealand
Posted 4-Nov-2017 13:31


Nest launches in New Zealand
Posted 4-Nov-2017 12:31



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.