WebmasterNet

PHP-Quelltext

$allowed    = array("jpg", "jpeg", "gif");
$extension  = explode(".", $uploadedfile);
$extension  = $extension[count($extension) - 1];

if (in_array($extension, $allowed) == false){
       die("Die Endung ".$extension." ist verboten!");
}

Quellcode

POST /test/upload.php?action=upload HTTP/1.1
Host: www.stoffl.info
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.0.17) Gecko/2009122116 Firefox/3.0.17 (.NET CLR 3.5.30729)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: de-de,de;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.stoffl.info/test/upload.php
Cookie: PHPSESSID=iglft967egalr6oioaq09a5i61; session=s
Content-Type: multipart/form-data; boundary=---------------------------92283117313454
Content-Length: 34744
-----------------------------92283117313454
Content-Disposition: form-data; name="MAX_FILE_SIZE"

4000000
-----------------------------92283117313454
Content-Disposition: form-data; name="pic_file"; filename="logo-stiftung-warentest_test750.gif"
Content-Type: image/gif

GIF89aîT÷