minte9

LearnRemember

GET & POST

GET and POST are the same from security perspective (use SSL insteed). GET is recommended for pages requiring bookmarking. GET will limit the size and type of data to be send. POST is the only method for uploading files.

Encode

To create an url that contains query data, use urlencode(). PHP interpreter automatically decodes data for us

  code
$value = "A&B";

echo "http://www.example.com/index.php?data=" . urlencode($value);
    // data=A+%26+B

 
// http://example.org/index.php?list=user&order[by]=column

echo $_GET['order']['by']; // Outputs: column

File Uploads

Enctype='multipart/form-data' Upload checks: error, tmp_name, size, is_uploaded_file Filter and change the file name

     copy
<form enctype="multipart/form-data" 
        action="index.php" method="post">
    <input type="hidden" name="MAX_FILE_SIZE" value="50000" />
    <input name="filedata" type="file" />
    <input type="submit" value="Send file" />
</form>

MAX_FILE_SIZE is almost entirely meaningless, since it sits on the client side. Use php.ni insteed.

 
# Maximum size of POST data that PHP will accept.
post_max_size = 8M

# Maximum amount of time each script may spend parsing request data
max_input_time = 60    
    
# Maximum allowed size for uploaded files.
upload_max_filesize = 2M

Once a file is uploaded to the server, PHP stores is in a temporary location.

  copy
<form enctype="multipart/form-data" 
        action="index.php" method="post">
    <input name="filedata" type="file" />
    <input type="submit" value="Submit" />
</form>

  copy
//print_r($_FILES['filedata']);    
if(!empty($_FILES['filedata']['tmp_name']) && 
    $_FILES['filedata']['error'] === 0 && 
    $_FILES['filedata']['size'] > 0){
        
    if (is_uploaded_file($_FILES['filedata']['tmp_name'])) {
        // move and rename    
    }
}