rishford has asked for the wisdom of the Perl Monks concerning the following question:
And here is the perl script - cgi-bin/selecttestenv.pl:<form name="form2" method="post" action="/cgi-bin/selecttestenv.pl" en +ctype="multipart/form-data"> Please specify the test pack <p>DAP:<br /> <input type "text" name="dap" value= "" size="31" > </font></p> <p>Tick File:<br /> <input type="file" name="tick" size="chars"></p> <p><i>Tick File DTD:</i></br> <input type="file" name="tickdtd" size="chars"></p> <p><i>Fx Rates:</i></br> <input type="file" name="fxrates" size="chars"></p> <p><i>Fx Rates DTD:</i></br> <input type="file" name="fxdtd" size="chars"></p> <p>Excel File:<br /> <input type="file" name="excel" size="chars"></p> </font></p> <p> <input type="submit" name="form2" value="Next"></p> </form>
$CGI::POST_MAX = 1024 * 5000; my $safe_filename_characters = "a-zA-Z0-9_.-"; my $upload_dir = $dir; print $upload_dir; my $query = new CGI; my $filename = $query->param('tick'); print "my $filename = $query->param($tick); "; if ( !$filename ) { print $query->header ( ); #print "\r\n"; print "There was a problem uploading your testpack (try a smaller fil +e)."; exit; } my ( $name, $path, $extension ) = fileparse ( $filename, '\..*' ); $filename = $name . $extension; $filename =~ tr/ /_/; $filename =~ s/[^$safe_filename_characters]//g; if ( $filename =~ /^([$safe_filename_characters]+)$/ ) { $filename = $1; } else { die "Filename contains invalid characters"; } my $upload_filehandle = $query->upload('$filename'); #print "U:" . "$upload_dir" . "\r\n"; #print "F:" . "$filename" . "\r\n"; #print "UF:" . ">$upload_dir/$filename" . "\r\n"; print "open ( UPLOADFILE, '>$upload_dir/ticks.xml' )"; open ( UPLOADFILE, ">$upload_dir/ticks.xml" ) or die "$!"; binmode UPLOADFILE; while ( <$upload_filehandle> ) { print UPLOADFILE; } close UPLOADFILE; print $query->header ( );
|
|---|
| Replies are listed 'Best First'. | |
|---|---|
|
Re: Trying to write an appropriate file upload script
by lostjimmy (Chaplain) on Jan 25, 2010 at 19:18 UTC |