Html Form File Upload Php

Html Form File Upload
Html Form File Upload Php Script
Upload File Html
Html Form File Upload Example
Html Form File Upload Php W3schools
C# Html File Upload
Php File Upload

Active4 years, 5 months ago

Web Developer How To: Upload Images Using PHP. Let's start with the HTML form. Php // filename: upload.form.php // first let's set some variables // make a note. The form above sends data to a file called 'upload.php', which we will create next. Create The Upload File PHP Script The 'upload.php' file contains the code for uploading a file.

This question already has an answer here:

File input 'accept' attribute - is it useful? 8 answers

I have a simple HTML upload form, and I want to specify a default extension ('*.drp' for example). I've read that the way to do this is through the ACCEPT attribute of the input tag, but I don't know how exactly.

EditI know validation is possible using javascript, but I would like the user to only see '.drp' files in his popup dialog. Also, I don't care much about server-side validation in this application.

ripper234

ripper234ripper234

95.6k227 gold badges553 silver badges846 bronze badges

marked as duplicate by Bill the LizardMar 26 '14 at 17:43

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

7 Answers

For specific formats like yours '.drp '. You can directly pass that in accept='.drp' it will work for that.

But without ' * '

Ruslan López

3,2791 gold badge16 silver badges28 bronze badges

ParaMeterzParaMeterz

6,0071 gold badge15 silver badges20 bronze badges

I use javascript to check file extension. Here is my code:

HTML

javascript

NazriNazri

The accept attribute expects MIME types, not file masks. For example, to accept PNG images, you'd need accept='image/png'. You may need to find out what MIME type the browser considers your file type to be, and use that accordingly. However, since a 'drp' file does not appear standard, you might have to accept a generic MIME type.

Additionally, it appears that most browsers may not honor this attribute.

The better way to filter file uploads is going to be on the server-side. This is inconvenient since the occasional user might waste time uploading a file only to learn they chose the wrong one, but at least you'll have some form of data integrity.

Alternatively you may choose to do a quick check with JavaScript before the form is submitted. Just check the extension of the file field's value to see if it is '.drp'. This is probably going to be much more supported than the accept attribute.

Brian ClineBrian Cline

17.4k4 gold badges22 silver badges25 bronze badges

I wouldnt use this attribute as most browsers ignore it as CMS points out.

By all means use client side validation but only in conjunction with server side. Any client side validation can be got round.

Slightly off topic but some people check the content type to validate the uploaded file. You need to be careful about this as an attacker can easily change it and upload a php file for example. See the example at: http://www.scanit.be/uploads/php-file-upload.pdf

alexmacalexmac

3,3203 gold badges25 silver badges31 bronze badges

You can do it using javascript. Grab the value of the form field in your submit function, parse out the extension.

You can start with something like this:

I agree with alexmac - do it server-side as well.

Diodeus - James MacFarlaneDiodeus - James MacFarlane

97.6k29 gold badges139 silver badges167 bronze badges

The accept attribute specifies a comma-separated list of content types (MIME types) that the target of the form will process correctly. Unfortunately this attribute is ignored by all the major browsers, so it does not affect the browser's file dialog in any way.

John TopleyJohn Topley

87.4k42 gold badges183 silver badges231 bronze badges

Alistair RAlistair R

Not the answer you're looking for? Browse other questions tagged htmlwebformsfile-upload or ask your own question.