迷你Ajax文件上传器动态上传路径

我目前正在为一小组人员下载文件&手册制作一个小门户网站。在网站中，我也希望人们能够上传文件，所以我使用Mini Ajax File Upload。在上传表单中，我想要一个下拉框，以便人们可以选择他们想要上传文件的位置。我只是无法确定如何执行此下拉菜单来更改上传目录。迷你Ajax文件上传器动态上传路径

上传目录被设置在这里：

if(move_uploaded_file($_FILES['upl']['tmp_name'], 'uploads/'.$_FILES['upl']['name'])){ 
     echo '{"status":"success"}'; 
     exit; 
    }

来源

2015-10-06 WintersWolf

我已经找到了解决办法和改进它，所以它做什么，我想它。这是脚本，以防其他人想要它。请注意，这暴露了你的服务器的目录结构，它也有一个shell_exec wget功能，使你可以注入。这本身并不安全/安全，您需要增加安全性或自行承担风险进行公开使用。

该脚本将让用户选择与该脚本相同的目录中的文件夹上传文件，他们也可以输入文件的URL并让服务器下载它（在Linux服务器上）。

  <?php 
    if ($_POST['variable'] == '') 
    { 
    $variable = './'; // default folder 
    } 
    else 
    { 
    $variable = $_POST['variable'] ; 
    } 
    $folder = $variable; 
    $uploadpath = "$folder/";  
    $max_size = 2000000;   
    $alwidth = 90000;    
    $alheight = 90000;   
    $allowtype = array('bmp', 'gif', 'jpg', 'jpe', 'jpeg', 'png', 'psd', 'tga', 'tif', '7z', 'bz', 'gz', 'rar', 'tar', 'zip', 'aac', 'flac', 'mid', 'midi', 'mp3', 'ogg', 'wma', 'wav', 'c', 'class', 'cpp', 'css', 'erb', 'htm', 'html', 'java', 'js', 'php', 'pl', 'py', 'rb', 'xhtml', 'xml', 'accdb', 'db', 'dbf', 'mdb', 'pdb', 'sql', 'csv', 'doc', 'docx', 'odt', 'pdf', 'xls', 'xlsx', 'ppt', 'app', 'bat', 'com', 'exe', 'jar', 'msi', 'vb', 'eot', 'otf', 'ttf', 'woff', 'gam', 'nes', 'rom', 'sav', 'box', 'deb', 'rpm', 'bat', 'cmd', 'sh', 'cfg', 'ini', 'log', 'md', 'rtf', 'txt', 'ai', 'drw', 'eps', 'ps', 'svg', 'avi', 'flv', 'mkv', 'mov', 'mp4', 'mpg', 'ogv', 'webm', 'wmv', 'swf', 'bak', 'msg', 'blank'); 

    $wgeturl = $_POST['wget-url']; 
    $command = "wget -P $uploadpath $wgeturl"; 
    $output = shell_exec($command);   

    if(isset($_FILES['fileup']) && strlen($_FILES['fileup']['name']) > 1) { 
     $uploadpath = $uploadpath . basename($_FILES['fileup']['name']);  
     $sepext = explode('.', strtolower($_FILES['fileup']['name'])); 
     $type = end($sepext); 
     list($width, $height) = getimagesize($_FILES['fileup']['tmp_name']);  
     $err = '';   


     if(!in_array($type, $allowtype)) $err .= 'The file: <b>'. $_FILES['fileup']['name']. '</b> not has the allowed extension type.'; 
     if($_FILES['fileup']['size'] > $max_size*1000000) $err .= '<br/>Maximum file size must be: '. $max_size. ' KB.'; 
     if(isset($width) && isset($height) && ($width >= $alwidth || $height >= $alheight)) $err .= '<br/>The maximum Width x Height must be: '. $alwidth. ' x '. $alheight; 


     if($err == '') { 
     if(move_uploaded_file($_FILES['fileup']['tmp_name'], $uploadpath)) { 
      echo 'File: <b>'. basename($_FILES['fileup']['name']). '</b> successfully uploaded:'; 
      echo '<br/>File type: <b>'. $_FILES['fileup']['type'] .'</b>'; 
      echo '<br />Size: <b>'. number_format($_FILES['fileup']['size']/1024, 3, '.', '') .'</b> KB'; 
      if(isset($width) && isset($height)) echo '<br/>Image Width x Height: '. $width. ' x '. $height; 
      echo '<br/><br/>Image address: <b>http://'.$_SERVER['HTTP_HOST'].rtrim(dirname($_SERVER['REQUEST_URI']), '\\/').'/'.$uploadpath.'</b>'; 
     } 
     else echo '<b>Unable to upload the file.</b>'; 
     } 
     else echo $err; 
    } 
    ?> 
    <div style="margin:1em auto; width:333px; text-align:center;"> 

    </div> 
    <div style="margin:1em auto; width:333px; text-align:center;"> 
    <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="POST" enctype="multipart/form-data"> 
    <b>Upload from URL:</b> <input type="text" name="wget-url" value="URL to file"><br\> 
    <input type="file" name="fileup" /><br/> 
    <select name="variable" /> 
    <option value="" selected="selected">Select a folder</option> 


    <form name="input" action="upload.php" method="post" onchange="this.form.submit()"> 

    <?php 
    $dirs = glob("*", GLOB_ONLYDIR); 
    foreach($dirs as $val){ 
    echo '<option value="'.$val.'">'.$val."</option>\n"; 
    } 
    ?> 
    </select> 
     <button type="submit" class="btn btn-primary btn-lg" name='submit' value="Upload" />Upload</button> 
    </div> 
    </form>

来源

2015-10-07 22:35:48 WintersWolf

迷你Ajax文件上传器动态上传路径

回答

相关问题