PHP check_file_type函数代码示例

 /**
  * 图片上传的处理函数
  *
  * @access      public
  * @param       array       upload       包含上传的图片文件信息的数组
  * @param       array       dir          文件要上传在$this->data_dir下的目录名。如果为空图片放在则在$this->images_dir下以当月命名的目录下
  * @param       array       img_name     上传图片名称，为空则随机生成
  * @return      mix         如果成功则返回文件名，否则返回false
  */
 function upload_image($upload, $dir = '', $img_name = '')
 {
     /* 没有指定目录默认为根目录images */
     if (empty($dir)) {
         /* 创建当月目录 */
         $dir = date('Ym');
         $dir = ROOT_PATH . $this->images_dir . '/' . $dir . '/';
     } else {
         /* 创建目录 */
         $dir = ROOT_PATH . $this->data_dir . '/' . $dir . '/';
         if ($img_name) {
             $img_name = $dir . $img_name;
             // 将图片定位到正确地址
         }
     }
     /* 如果目标目录不存在，则创建它 */
     if (!file_exists($dir)) {
         if (!make_dir($dir)) {
             /* 创建目录失败 */
             $this->error_msg = sprintf($GLOBALS['_LANG']['directory_readonly'], $dir);
             $this->error_no = ERR_DIRECTORY_READONLY;
             return false;
         }
     }
     if (empty($img_name)) {
         $img_name = $this->unique_name($dir);
         $img_name = $dir . $img_name . $this->get_filetype($upload['name']);
     }
     if (!$this->check_img_type($upload['type'])) {
         $this->error_msg = $GLOBALS['_LANG']['invalid_upload_image_type'];
         $this->error_no = ERR_INVALID_IMAGE_TYPE;
         return false;
     }
     /* 允许上传的文件类型 */
     $allow_file_types = '|GIF|JPG|JEPG|PNG|BMP|SWF|';
     if (!check_file_type($upload['tmp_name'], $img_name, $allow_file_types)) {
         $this->error_msg = $GLOBALS['_LANG']['invalid_upload_image_type'];
         $this->error_no = ERR_INVALID_IMAGE_TYPE;
         return false;
     }
     if ($this->move_file($upload, $img_name)) {
         return str_replace(ROOT_PATH, '', $img_name);
     } else {
         $this->error_msg = sprintf($GLOBALS['_LANG']['upload_failure'], $upload['name']);
         $this->error_no = ERR_UPLOAD_FAILURE;
         return false;
     }
 }

 /**
  * 图片上传的处理函数
  *
  * @access      public
  * @param       array       upload       包含上传的图片文件信息的数组
  * @param       array       dir          文件要上传在$this->data_dir下的目录名。如果为空图片放在则在$this->images_dir下以当月命名的目录下
  * @param       array       img_name     上传图片名称，为空则随机生成
  * @return      mix         如果成功则返回文件名，否则返回false
  */
 function upload_image($upload, $dir = '', $img_name = '')
 {
     /* 没有指定目录默认为根目录images */
     if (empty($dir)) {
         /* 创建当月目录 */
         $dir = date('Ym');
         $dir = $this->root_path . $this->images_dir . '/' . $dir . '/';
     } else {
         /* 创建目录 */
         $dir = $this->root_path . $this->data_dir . '/' . $dir . '/';
         if ($img_name) {
             $img_name = $dir . $img_name;
             // 将图片定位到正确地址
         }
     }
     /* 如果目标目录不存在，则创建它 */
     if (!file_exists($dir)) {
         $this->dmkdir($dir);
     }
     if (empty($img_name)) {
         $img_name = $this->unique_name($dir);
         $img_name = $dir . $img_name . $this->get_filetype($upload['name']);
     }
     if (!$this->check_img_type($upload['type'])) {
         $this->error_msg = '图片类型错误';
         return false;
     }
     /* 允许上传的文件类型 */
     $allow_file_types = '|GIF|JPG|JEPG|PNG|BMP|SWF|';
     if (!check_file_type($upload['tmp_name'], $img_name, $allow_file_types)) {
         $this->error_msg = '文件类型错误';
         return false;
     }
     if ($this->move_file($upload, $img_name)) {
         return str_replace($this->root_path, '', $img_name);
     } else {
         $this->error_msg = '文件上传失败';
         return false;
     }
 }

if ($_REQUEST['act'] == 'update') {
    /* 权限判断 */
    admin_priv('article_manage');
    /*检查文章名是否相同*/
    $is_only = $exc->is_only('title', $_POST['title'], $_POST['id'], "cat_id = '{$_POST['article_cat']}'");
    if (!$is_only) {
        sys_msg(sprintf($_LANG['title_exist'], stripslashes($_POST['title'])), 1);
    }
    if (empty($_POST['cat_id'])) {
        $_POST['cat_id'] = 0;
    }
    /* 取得文件地址 */
    $file_url = '';
    if (empty($_FILES['file']['error']) || !isset($_FILES['file']['error']) && isset($_FILES['file']['tmp_name']) && $_FILES['file']['tmp_name'] != 'none') {
        // 检查文件格式
        if (!check_file_type($_FILES['file']['tmp_name'], $_FILES['file']['name'], $allow_file_types)) {
            sys_msg($_LANG['invalid_file']);
        }
        // 复制文件
        $res = upload_article_file($_FILES['file']);
        if ($res != false) {
            $file_url = $res;
        }
    }
    if ($file_url == '') {
        $file_url = $_POST['file_url'];
    }
    /* 计算文章打开方式 */
    if ($file_url == '') {
        $open_type = 0;
    } else {

    /* 处理上传文件 */
    $file_var_list = array();
    $sql = "SELECT * FROM " . $ecs->table('shop_config') . " WHERE parent_id > 0 AND type = 'file'";
    $res = $db->query($sql);
    while ($row = $db->fetchRow($res))
    {
        $file_var_list[$row['code']] = $row;
    }

    foreach ($_FILES AS $code => $file)
    {
        /* 判断用户是否选择了文件 */
        if ((isset($file['error']) && $file['error'] == 0) || (!isset($file['error']) && $file['tmp_name'] != 'none'))
        {
            /* 检查上传的文件类型是否合法 */
            if (!check_file_type($file['tmp_name'], $file['name'], $allow_file_types))
            {
                sys_msg(sprintf($_LANG['msg_invalid_file'], $file['name']));
            }
            else
            {
                if ($code == 'shop_logo')
                {
                    include_once('includes/lib_template.php');
                    $info = get_template_info($_CFG['template']);

                    $file_name = str_replace('{$template}', $_CFG['template'], $file_var_list[$code]['store_dir']) . $info['logo'];
                }
                elseif ($code == 'watermark')
                {
                    $ext = array_pop(explode('.', $file['name']));

/**
 * 处理上传文件，并返回上传图片名(上传失败时返回图片名为空）
 *
 * @access  public
 * @param array     $upload     $_FILES 数组
 * @param array     $type       图片所属类别，即data目录下的文件夹名
 *
 * @return string               上传图片名
 */
function upload_file($upload, $type)
{
    if (!empty($upload['tmp_name'])) {
        $ftype = check_file_type($upload['tmp_name'], $upload['name'], '|png|jpg|jpeg|gif|doc|xls|txt|zip|ppt|pdf|rar|docx|xlsx|pptx|');
        if (!empty($ftype)) {
            $name = date('Ymd');
            for ($i = 0; $i < 6; $i++) {
                $name .= chr(mt_rand(97, 122));
            }
            $name = $_SESSION['user_id'] . '_' . $name . '.' . $ftype;
            $target = ROOT_PATH . DATA_DIR . '/' . $type . '/' . $name;
            if (!move_upload_file($upload['tmp_name'], $target)) {
                ECTouch::err()->add(L('upload_file_error'), 1);
                return false;
            } else {
                return $name;
            }
        } else {
            ECTouch::err()->add(L('upload_file_type'), 1);
            return false;
        }
    } else {
        ECTouch::err()->add(L('upload_file_error'));
        return false;
    }
}

}
##### Panel Control Check #####
##### Upload File Validation #####
if (isset($_POST["submit_file"])) {
    if ($_FILES["file"]["error"] > 0) {
        if ($_FILES["file"]["error"] == 4) {
            error_msg("Error: Please select a torrent file.");
        } else {
            error_msg("Error: " . $_FILES["file"]["error"]);
        }
    } else {
        $file_name = $_FILES["file"]["name"];
        $tmp_path = $_FILES["file"]["tmp_name"];
        $file_path = $upload_dir . "/" . $_FILES["file"]["name"];
        $file_type = $_FILES["file"]["type"];
        if (check_ext($file_name) || check_file_type($file_type)) {
            if (file_exists($file_path)) {
                error_msg("Error: {$file_name} already exists!");
            } else {
                move_uploaded_file($tmp_path, $file_path);
                if (!valid_torrent($file_path)) {
                    remove_torrent($file_path);
                    error_msg("Error: Invalid torrent file!");
                } else {
                    output_msg("Uploaded: {$file_name}");
                }
            }
        } else {
            error_msg("Error: Invalid file type!");
        }
    }

function addNews()
{
    $file_url = '';
    if (isset($_FILES['file']['error']) && $_FILES['file']['error'] == 0 || !isset($_FILES['file']['error']) && isset($_FILES['file']['tmp_name']) && $_FILES['file']['tmp_name'] != 'none') {
        if (!check_file_type($_FILES['file']['tmp_name'], $_FILES['file']['name'], $allow_file_types)) {
            sys_msg($_LANG['invalid_file']);
        }
        $res = upload_article_file($_FILES['file']);
        if ($res != false) {
            $file_url = $res;
        }
    }
    if (!$file_url && $_POST['article_id']) {
        $file_url = $_POST['file_url'];
    }
    $open_type = 2;
    /*插入数据*/
    $add_time = gmtime();
    $_POST['cat_id'] = 0;
    if (!$_POST['article_id']) {
        $sql = "INSERT INTO " . $GLOBALS['ecs']->table('article') . "(title, cat_id, article_type, is_open, author, " . "author_email, keywords, content, add_time, file_url, open_type, link, description) " . "VALUES ('{$_POST['title']}', '{$_POST['article_cat']}', '0', '1', " . "'', '', '', '{$_POST['description']}', " . "'{$add_time}', '{$file_url}', '{$open_type}', '{$_POST['link_url']}', '{$_POST['description']}')";
        $GLOBALS['db']->query($sql);
        return $GLOBALS['db']->insert_id();
    } else {
        $aid = (int) $_POST['article_id'];
        $GLOBALS['db']->query("update " . $GLOBALS['ecs']->table('article') . " set \r\n\t\ttitle='{$_POST[title]}',file_url='{$file_url}',link='{$_POST['link_url']}',description='{$_POST['description']}' where article_id={$aid}");
        return $aid;
    }
}

/**
 * 分类商品代表图片
 * @param int $catid 商品分类id
 */
function upload_category_pic($catid)
{
    /* 允许上传的文件类型 */
    $allow_file_types = '|GIF|JPG|PNG|BMP|';
    foreach ($_FILES as $code => $file) {
        /* 判断用户是否选择了文件 */
        if (isset($file['error']) && $file['error'] == 0 || !isset($file['error']) && $file['tmp_name'] != 'none') {
            /* 检查上传的文件类型是否合法 */
            if (!check_file_type($file['tmp_name'], $file['name'], $allow_file_types)) {
                sys_msg(sprintf($_LANG['msg_invalid_file'], $file['name']));
            } else {
                $file_name = "../data/supplier/category/";
                if ($code == 'cat_pic') {
                    $ext = array_pop(explode('.', $file['name']));
                    $file_name .= $_SESSION['supplier_id'] . 'c' . time() . '.' . $ext;
                    if ($catid > 0) {
                        $catpic = get_cat_info($catid);
                        if (file_exists($catpic['cat_pic'])) {
                            @unlink($catpic['cat_pic']);
                        }
                    }
                }
                /* 判断是否上传成功 */
                if (move_upload_file($file['tmp_name'], $file_name)) {
                    return $file_name;
                } else {
                    sys_msg(sprintf($_LANG['msg_upload_failed'], $file['name'], $file_name));
                }
            }
        }
    }
}

/**
 * private function validateFile.
 * 
 * validation for file upload from form
 * 
 * @param string $fieldname
 *  fieldname of input file form
 */
function validateFile($fieldname)
{
    $error = '';
    if (!empty($_FILES[$fieldname]['error'])) {
        switch ($_FILES[$fieldname]['error']) {
            case '1':
                $error = 'Upload maximum file is 4 MB.';
                break;
            case '2':
                $error = 'File is too big, please upload with smaller size.';
                break;
            case '3':
                $error = 'File uploaded, but only halef of file.';
                break;
            case '4':
                $error = 'There is no File to upload';
                break;
            case '6':
                $error = 'Temporary folder not exists, Please try again.';
                break;
            case '7':
                $error = 'Failed to record File into disk.';
                break;
            case '8':
                $error = 'Upload file has been stop by extension.';
                break;
            case '999':
            default:
                $error = 'No error code avaiable';
        }
    } elseif (empty($_FILES[$fieldname]['tmp_name']) || $_FILES[$fieldname]['tmp_name'] == 'none') {
        $error = 'There is no File to upload.';
    } elseif ($_FILES[$fieldname]['size'] > FILE_UPLOAD_MAX_SIZE) {
        $error = 'Upload maximum file is ' . number_format(FILE_UPLOAD_MAX_SIZE / 1024, 2) . ' MB.';
    } else {
        //$get_ext = substr($_FILES[$fieldname]['name'],strlen($_FILES[$fieldname]['name'])-3,3);
        $cekfileformat = check_file_type($_FILES[$fieldname]);
        if (!$cekfileformat) {
            $error = 'Upload File only allow (jpg, gif, png, pdf, doc, xls, xlsx, docx)';
        }
    }
    return $error;
}

/**
 * 保存附件
 * Enter description here ...
 * @param unknown_type $attach
 */
function save_notice_attach($notice_id, $attach, $uploader)
{
    global $allow_file_types;
    $result = array("error" => 0, "msg" => "");
    if (isset($attach['error']) && $attach['error'] == 0 || !isset($attach['error']) && isset($attach['tmp_name']) && $attach['tmp_name'] != 'none') {
        // 检查文件格式
        if (!check_file_type($attach['tmp_name'], $attach['name'], $allow_file_types)) {
            return array("error" => 1, "msg" => "您上传的文件格式不被允许,只能是以下格式的文件才能上传:" . $allow_file_types);
        }
        // 复制文件
        $res = upload_article_file($attach);
        if ($res != false) {
            $file_url = $res;
        }
    } else {
        if (isset($attach['error']) && $attach['error'] == 4) {
            return $result;
        } else {
            return array("error" => 1, "msg" => "您上传的文件存在异常，文件必须在2M之内，且只能是以下格式的文件:" . $allow_file_types);
        }
    }
    $sql = "insert into " . $GLOBALS['ecs']->table("notice_attach") . " (notice_id, name, path, size, type, uploader, created) \r\n\t\tvalues ('{$notice_id}', '{$attach['name']}', '{$file_url}', '{$attach['size']}', '{$attach['type']}', '{$uploader}', now()) ";
    $GLOBALS['db']->query($sql);
    return $result;
}

 function validate_file($field, $caption)
 {
     if ($_FILES[$field]['error'] == 0) {
         $temp_array = explode(":", $caption);
         $caption = $temp_array[0];
         $file_type = $temp_array[1];
         /*$mime_type = mime_content_type($_FILES[$field]['tmp_name']);
           if(!strstr($mime_type,$file_type)) {
               $this->error_array[] = "Please select a valid ".$caption." file";
           }*/
         if (!check_file_type($_FILES[$field]['tmp_name'], $file_type)) {
             $this->error_array[] = "Please select a valid " . $caption . " file";
             //unset so it doesnt get added to xml schema
             unset($_FILES[$field]);
         }
     }
 }

function check_file_type($filename, $type_name)
{
    $len = strlen($type_name);
    if (substr($filename, -$len) == $type_name) {
        return true;
    }
    return false;
}
// download src code
$md5 = md5($src_code);
$target_dir = "../code_dir/{$md5}";
$cmd = "rm -rf {$target_dir}; mkdir {$target_dir}; cd {$target_dir}; wget '{$src_code}'";
system($cmd);
// depress the compressed file
$file = array_pop(glob("{$target_dir}/*"));
$filename = basename($file);
chdir($target_dir);
if (check_file_type($filename, "zip")) {
    $cmd = "unzip {$filename}";
} else {
    if (check_file_type($filename, "tgz")) {
        $cmd = "tar -zxvf {$filename}";
    } else {
        echo "Invalid file type: {$filename}";
        exit(1);
    }
}
system($cmd . " > /dev/null");
chdir("../../php");
save_log($src_code);
echo "file downloaded successfully";

 /**
  * 更新系统配置
  */
 public function post()
 {
     /* 允许上传的文件类型 */
     $allow_file_types = '|GIF|JPG|PNG|BMP|SWF|DOC|XLS|PPT|MID|WAV|ZIP|RAR|PDF|CHM|RM|TXT|CERT|';
     $arr = array();
     $res = $this->model->table('touch_shop_config')->field('id, value')->select();
     if (is_array($res)) {
         foreach ($res as $vo) {
             $arr[$vo['id']] = $vo['value'];
         }
     }
     foreach (I('value') as $key => $val) {
         if ($arr[$key] != $val) {
             $data['value'] = $val;
             $condition['id'] = $key;
             $this->model->table('touch_shop_config')->data($data)->where($condition)->update();
         }
     }
     /* 处理上传文件 */
     $file_var_list = array();
     $res = $this->model->table('touch_shop_config')->where("parent_id > 0 AND type = 'file'")->select();
     if (is_array($res)) {
         foreach ($res as $vo) {
             $file_var_list[$vo['code']] = $vo;
         }
     }
     foreach ($_FILES as $code => $file) {
         /* 判断用户是否选择了文件 */
         if (isset($file['error']) && $file['error'] == 0 || !isset($file['error']) && $file['tmp_name'] != 'none') {
             /* 检查上传的文件类型是否合法 */
             if (!check_file_type($file['tmp_name'], $file['name'], $allow_file_types)) {
                 $this->message(sprintf(L('msg_invalid_file'), $file['name']), NULL, 'error');
             } else {
                 if ($code == 'shop_logo') {
                     $info = get_template_info(C('template'));
                     $info['logo'] = empty($info['logo']) ? 'logo.png' : $info['logo'];
                     $file_name = str_replace('{$template}', C('template'), $file_var_list[$code]['store_dir']) . $info['logo'];
                 } elseif ($code == 'watermark') {
                     $name = explode('.', $file['name']);
                     $ext = array_pop($name);
                     $file_name = $file_var_list[$code]['store_dir'] . 'watermark.' . $ext;
                     if (file_exists($file_var_list[$code]['value'])) {
                         @unlink($file_var_list[$code]['value']);
                     }
                 } elseif ($code == 'no_picture') {
                     $name = explode('.', $file['name']);
                     $ext = array_pop($name);
                     $file_name = $file_var_list[$code]['store_dir'] . 'no_picture.' . $ext;
                     if (file_exists($file_var_list[$code]['value'])) {
                         @unlink($file_var_list[$code]['value']);
                     }
                 } else {
                     $file_name = $file_var_list[$code]['store_dir'] . $file['name'];
                 }
                 /* 判断是否上传成功 */
                 if (move_upload_file($file['tmp_name'], $file_name)) {
                     $data2['value'] = __ROOT__ . str_replace(array('./', '../'), '/', $file_name);
                     $this->model->table('touch_shop_config')->data($data2)->where("code = '{$code}'")->update();
                 } else {
                     $this->message(sprintf(L('msg_upload_failed'), $file['name'], $file_var_list[$code]['store_dir']), NULL, 'error');
                 }
             }
         }
     }
     /* 处理发票类型及税率 */
     $invoice_rate = I('invoice_rate');
     if (!empty($invoice_rate)) {
         foreach ($invoice_rate as $key => $rate) {
             $rate = round(floatval($rate), 2);
             if ($rate < 0) {
                 $rate = 0;
             }
             I('invoice_rate.' . $key, $rate);
         }
         $invoice = array('type' => I('invoice_type'), 'rate' => I('invoice_rate'));
         $data3['value'] = serialize($invoice);
         $this->model->table('touch_shop_config')->data($data3)->where("code = 'invoice_type'")->update();
     }
     /* 清除缓存 */
     clear_all_files();
     $site_info = site_info();
     $this->cloud->data($site_info)->act('post.record');
     $this->message(L('save_success'), url('index'));
 }

/**
 * 处理上传文件，并返回上传图片名(上传失败时返回图片名为空）
 *
 * @access  public
 * @param array     $upload     $_FILES 数组
 * @param array     $type       图片所属类别，即data目录下的文件夹名
 *
 * @return string               上传图片名
 */
function upload_file($upload, $type)
{
    if (!empty($upload['tmp_name'])) {
        $ftype = check_file_type($upload['tmp_name'], $upload['name'], '|png|jpg|jpeg|gif|doc|xls|txt|zip|ppt|pdf|rar|');
        if (!empty($ftype)) {
            $name = date('Ymd');
            for ($i = 0; $i < 6; $i++) {
                $name .= chr(mt_rand(97, 122));
            }
            $name = $_SESSION['user_id'] . '_' . $name . '.' . $ftype;
            //            $target = ROOT_PATH . DATA_DIR . '/' . $type . '/' . $name;
            $target = saestor(DATA_DIR . '/' . $type . '/' . $name);
            // for sae
            if (!move_upload_file($upload['tmp_name'], $target)) {
                $GLOBALS['err']->add($GLOBALS['_LANG']['upload_file_error'], 1);
                return false;
            } else {
                return $name;
            }
        } else {
            $GLOBALS['err']->add($GLOBALS['_LANG']['upload_file_type'], 1);
            return false;
        }
    } else {
        $GLOBALS['err']->add($GLOBALS['_LANG']['upload_file_error']);
        return false;
    }
}

<?php

define('IN_ECS', true);
define('ROOT_PATH', preg_replace('/includes(.*)/i', '', str_replace('\\', '/', __FILE__)));
$allow_file_types = '|GIF|JPG|PNG|BMP|SWF|DOC|XLS|PPT|MID|WAV|ZIP|RAR|PDF|CHM|RM|TXT|XLSX|CSV|';
if ($allow_file_types && stristr($allow_file_types, '|' . $format . '|') === false) {
    echo "3";
    echo '<br>';
    $format = '';
}
if (!check_file_type("D:\\phpserver\\phpfileuploadtmp\\phpB989.tmp", "studentTemplate.csv", $allow_file_types)) {
    print_r(array("error" => 1, "msg" => "您上传的文件格式不被允许,只能是以下格式的文件才能上传:"));
}
print_r("over");
?>