How can one ensure that only files from a specific directory can be deleted using PHP?

To ensure that only files from a specific directory can be deleted using PHP, you can check the file paths against the allowed directory before deleting them. This can be done by comparing the file paths with the absolute path of the allowed directory using the realpath() function. If the file path does not match the allowed directory, the deletion operation should be denied. 

<?php
$allowedDirectory = '/path/to/allowed/directory/';

$filePath = '/path/to/file/to/delete.txt';

if (strpos(realpath($filePath), realpath($allowedDirectory)) === 0) {
    unlink($filePath);
    echo 'File deleted successfully.';
} else {
    echo 'Deletion not allowed for this file.';
}
?>

Keywords

PHP file deletion directory restriction file system security

Related Questions