PHP Password Protected File Upload Example

PHP Password Protected File Upload Example


Some sites I used:

webdesign.tutsplus.com/tutorials/how-to-integrate-no-captcha-recaptcha-in-your-website--cms-23024

github.com/google/recaptcha/blob/1.0.0/php/recaptchalib.php

google.com/recaptcha/admin#site/337789792?setup



Always Sanitize user input

Code:

$newstr = filter_var($str, FILTER_SANITIZE_STRING);

$id = filter_var($_GET['id'], FILTER_SANITIZE_STRING);

Another thing you will notice is that the file name and user who uploaded it is all you need to download file without a password so when you upload via your upload script it is strongly recommend that you randomize the actual file name while keeping the title of the file separate (in the database), this is left up to you to do because if i show you this, you will know how my system works and wont be secure! this is your homework :DI would randomize the filename upon upload

Part 2 This is for extra security of the filename





If you want to purchase this whole script (without capcha) and with randomized filenames contact me via pm and we can chat about this.


stackoverflow.com/questions/5438760/generate-random-5-characters-string
w3schools.com/php/func_math_rand.asp
w3schools.com/php/func_string_str_replace.asp