01.
<?php
02.
03.
04.
05.
06.
07.
08.
09.
$targetFolder
=
'uploads'
;
10.
11.
$verifyToken
= md5(
'unique_salt'
.
$_POST
[
'timestamp'
]);
12.
13.
if
(!
empty
(
$_FILES
) &&
$_POST
[
'token'
] ==
$verifyToken
) {
14.
$tempFile
=
$_FILES
[
'Filedata'
][
'tmp_name'
];
15.
$targetPath
=
$_SERVER
[
'uploads'
] .
$targetFolder
;
16.
17.
$newFile
=
$user_id
.
"_"
.
$_FILES
[
'Filedata'
][
'name'
];
18.
19.
$targetFile
= rtrim(
$targetPath
,
'/'
) .
'/'
.
$newFile
;
20.
21.
22.
$fileTypes
=
array
(
'jpg'
,
'jpeg'
,
'gif'
,
'png'
);
23.
$fileParts
=
pathinfo
(
$_FILES
[
'Filedata'
][
'name'
]);
24.
25.
if
(in_array(
$fileParts
[
'extension'
],
$fileTypes
)) {
26.
move_uploaded_file(
$tempFile
,
$targetFile
);
27.
echo
'1'
;
28.
}
else
{
29.
echo
'Invalid file type.'
;
30.
}
31.
}
32.
?>