Help with image uploading on my site

[Billh93]

How can I get rid of this error: "getimagesize() [function.getimagesize]: Filename cannot be empty". Everytime I don't upload a picture this pops up. Here is the code thats making trouble

Code: Select all

list($new_picture_width, $new_picture_height) = getimagesize($_FILES['new_picture']['tmp_name']);

[LoGiCaL__]

How can I get rid of this error: "getimagesize() [function.getimagesize]: Filename cannot be empty". Everytime I don't upload a picture this pops up. Here is the code thats making trouble

Code: Select all

list($new_picture_width, $new_picture_height) = getimagesize($_FILES['new_picture']['tmp_name']);

Why don't you test to see if $_FILES(['new_picture']['tmp_name']) exists first and if it does, then run that line of code? Something like:

Code: Select all


if(file_exists($_FILES['new_picture']['tmp_name']))
  list($new_picture_width, $new_picture_height) = getimagesize($_FILES['new_picture']['tmp_name']);



If that doesn't work then just test that the length of the image name is greater than 0.

Code: Select all

if(strlen($_FILES['new_picture']['name']) > 0)
  list($new_picture_width, $new_picture_height) = getimagesize($_FILES['new_picture']['tmp_name']);


[mShred]

If I remember correctly, this is an issue of the inputted file. I've had to mess with this kinda stuff before. Check to make sure the variable you're using is actually declared, and that the picture in question is valid. The function you're using requires all that shit because of previous security hazards. If that weren't true, I would have found an easier way into this jewelry store's site that I was pentesting.