【发布时间】:2021-10-06 18:20:00
【问题描述】:
带有此消息 "大小最大为 2 MB"
如何在此操作中插入尺寸验证? 我将制作 2 个上传文件,所以这是我的代码...
<?php
include 'koneksi.php';
$nama = $_POST['nama'];
$kelas = $_POST['kelas'];
$alamat = $_POST['alamat'];
$rand1 = rand();
$rand2 = rand();
$allowed = array('pdf');
$filename1 = $_FILES['file1']['name'];
$filename2 = $_FILES['file2']['name'];
$ekstensi1 = pathinfo($filename1, PATHINFO_EXTENSION);
$ekstensi2 = pathinfo($filename2, PATHINFO_EXTENSION);
if($filename1 != "" && in_array($ekstensi1,$allowed)){
move_uploaded_file($_FILES['file1']['tmp_name'], 'pdf1/'.$rand1.'_'.$filename1);
$nama_file1 = $rand1.'_'.$filename1;
}else{
$nama_file1 = "";
}
if($filename2 != "" && in_array($ekstensi2,$allowed)){
move_uploaded_file($_FILES['file2']['tmp_name'], 'pdf2/'.$rand2.'_'.$filename2);
$nama_file2 = $rand2.'_'.$filename2;
}else{
$nama_file2 = "";
}
mysqli_query($koneksi, "insert into siswa values (NULL,'$nama','$kelas','$alamat','$nama_file1','$nama_file2')");
header("location:index.php");
感谢您的帮助
【问题讨论】:
-
$_FILES['file_1']['size'] 将为您提供上传文件的大小。
-
警告:您对SQL Injections 持开放态度,应该使用参数化的prepared statements,而不是手动构建查询。它们由PDO 或MySQLi 提供。永远不要相信任何形式的输入!即使您的查询仅由受信任的用户执行,you are still in risk of corrupting your data。 Escaping is not enough!
-
@Someone_who_likes_SE 你想分享完整的代码吗,先生:D
-
如果我的输入是
'); DROP TABLE siswa; --怎么办?