Technical Support Forums

Free, outstanding support from WebAssist and your colleagues

› WebAssist Forums › Data Bridge › Data Bridge General / Announcements › Limit the possibility of uploading files based on the extension

Limit the possibility of uploading files based on the extension

Thread began 11/18/2018 10:56 am by María Luisa | Last modified 11/24/2018 2:59 pm by Ray Borduin | 1529 views | 10 replies |

11/18/2018 10:56 am | #1 María Luisa

Limit the possibility of uploading files based on the extension

Hello
I'm working on a file upload form. The files that are valid in this case can be of different types: .doc, .docx, .jpg, .jpeg, .pdf, .xls, .xlsx, .zip and .rar.

I have programmed the form with the help of WA (File Manipulation) and, also, I have managed to get the entered data (name of the file, user, etc) registered in the database.

However I do not see in helperphp.php the possibility of limiting the file types to those that I need. That is: .doc, .docx, .jpg, .jpeg, .pdf, .xls, .xlsx, .zip and .rar.

Can you help me?
Thank you

11/18/2018 11:14 am | #2 Ray BorduinWebAssist

You can use our "Server Validation" server behavior. It has a "file extension" validation and you can use the field from the form to validate against.

Did this help? Tips are appreciated...

11/19/2018 11:32 am | #3 María Luisa

Thanks, Ray. I will prove it

11/20/2018 3:57 am | #4 María Luisa

Hello:
I have included the validation of the server, however it does not work. I guess I've done something wrong.
The form has stopped uploading and clicking the Submit button gives me a warning whether the file extension is correct or not.

Warning: Cannot modify header information - headers already sent by (output started at /Applications/MAMP/htdocs/PML_4_2015_repar_prueba_ED_MSB/pml_admin/Gestiondocumentos.php:2) in /Applications/MAMP/htdocs/PML_4_2015_repar_prueba_ED_MSB/webassist/form_validations/wavt_scripts_php.php on line 85

What have I done wrong?
I attach my upload form

Thank you

11/20/2018 4:19 am | #5 María Luisa

And the validation by file size?

And the validation by file size?

I'm looking on the web and I can not find how to put the maximum size limit of my files in 2 MB.

Greetings and thank you

11/21/2018 4:42 am | #6 Ray BorduinWebAssist

Sorry I’m taking so long to reply. I’m on vacation and my laptop died. I should have it resolved by tomorrow so I can open your file and take a look to find out what is wrong and comment on file size validation.

Did this help? Tips are appreciated...

11/21/2018 7:53 am | #7 María Luisa

Thank you, Ray

11/21/2018 9:30 pm | #8 Ray BorduinWebAssist

To validate the file size, use Integer type validation on the "size" attribute of the uploaded file. The value will be in bytes, so you would validate that the file size is less than: 2000000 for 2MB.

The final validation code will look something like:

php:

<?php 

if ($_SERVER["REQUEST_METHOD"] === "POST")  {

  $WAFV_Redirect = "Gestiondocumentos.php";

  $_SESSION['WAVT_Gestiondocumentos_361_Errors'] = "";

  if ($WAFV_Redirect == "")  {

    $WAFV_Redirect = $_SERVER["PHP_SELF"];

  }

  $WAFV_Errors = "";

  $WAFV_Errors .= WAValidateFE(((isset($_FILES["nombre_doc"]))? preg_replace('/^.*\./', '', $_FILES["nombre_doc"]["name"]) :"") . "",".jpg, .jpeg, .doc, .docx, .xls, .xlsx, .pdf, .zip, .rar",true,1);

  $WAFV_Errors .= WAValidateNM(((isset($_FILES["nombre_doc"]))? preg_replace('/^.*\./', '', $_FILES["nombre_doc"]["size"]) :"0") . "",0,2000000,"",",.",true,2);



  if ($WAFV_Errors != "")  {

    PostResult($WAFV_Redirect,$WAFV_Errors,"Gestiondocumentos_361");

  }

}

?>

Did this help? Tips are appreciated...

11/21/2018 9:24 pm | #9 Ray BorduinWebAssist

The first error is because you added this to the top of the page:

<!--Codigo_nuevo-->

HTML comments need to be in the html... to do a php comment use:

php:

<?php //Codigo_nuevo ?>

You also can't have blank lines before a redirect in php. So make sure to remove the blank lines on lines: 15,40 and 59 and update the other HTML comments above the <html> tag to use php comments instead.

I'd also remove the line:

php:

<?php

ob_start();

?>

The validation isn't working because you used the Binding for "file extension"... it is a bit confusing I know, but you should use "client file name". The validation looks for the "." before the extension to validate against and the "file extension" binding removes the ".".

Did this help? Tips are appreciated...

11/22/2018 9:56 am | #10 María Luisa

Thank you, Ray.
I'm going to try it

Build websites with a little help from your friends

Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.

Build websites from already-built web applications

These out-of-the-box solutions provide you proven, tested applications that can be up and running now. Build a store, a gallery, or a web-based email solution.