Help with setting destination of uploaded file dynamically

[johngiggs]

I have a basic PHP script that I use to upload files. I can hard code the destination in the PHP script, but I want to set it dynamically via a variable I issue via curl.

Here's the script I am working on:

<?php
$target_path = "$destination";
$target_path = $target_path . basename( $_FILES['uploadedfile']['name']);
if(move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) {
echo "The file ". basename( $_FILES['uploadedfile']['name']).
" has been uploaded";
} else{
echo "There was an error uploading the file, please try again!";
}
?>

Here is the curl command:

curl -F "destination=/tmp" -F "uploadedfile=@file.txt"

http://mydomain.com/upload.php

Any assistance would be greatly appreciated!

Thanks,

John

 

[johngiggs]

I'm all set now. I figured it out.

<?php
if(isset($_POST['destination'])) $target_path= $_POST['destination'];
$target_path = $target_path . basename( $_FILES['uploadedfile']['name']);
if(move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) {
echo "The file ". basename( $_FILES['uploadedfile']['name']).
" has been uploaded";
} else{
echo "There was an error uploading the file, please try again!";
}
?>

curl -F "destination=/tmp" -F "uploadedfile=@file.txt"

http://mydomain.com/upload.php

 

[jpadie]

i would add some strong security in there to stop people being able to upload trojans and other malicious code.

 

[johngiggs]

Hi jpadie,

Thank you for your feedback. It's behind Apache authentication and is internal only, so I think I should be all set.

Thanks,

John