How can one ensure secure file uploads when using FTP in PHP?

To ensure secure file uploads when using FTP in PHP, one should validate the file type, sanitize the file name, and store the uploaded files in a directory outside of the web root to prevent direct access. Additionally, setting proper file permissions on the uploaded files is crucial to prevent unauthorized access. 

// Example PHP code snippet for secure file uploads using FTP

// Validate file type
$allowedTypes = ['image/jpeg', 'image/png', 'image/gif'];
if (!in_array($_FILES['file']['type'], $allowedTypes)) {
    die('Invalid file type. Only JPEG, PNG, and GIF files are allowed.');
}

// Sanitize file name
$fileName = preg_replace("/[^A-Za-z0-9.]/", '', $_FILES['file']['name']);

// FTP connection settings
$ftpServer = 'ftp.example.com';
$ftpUsername = 'username';
$ftpPassword = 'password';

// Connect to FTP server
$ftpConn = ftp_connect($ftpServer);
ftp_login($ftpConn, $ftpUsername, $ftpPassword);

// Upload file to FTP server
ftp_put($ftpConn, '/uploads/' . $fileName, $_FILES['file']['tmp_name'], FTP_BINARY);

// Close FTP connection
ftp_close($ftpConn);

Keywords

FTP PHP file uploads security validation

Related Questions