How can PHP developers ensure that images are properly uploaded and displayed on their websites?

To ensure that images are properly uploaded and displayed on websites, PHP developers can validate the file type, size, and dimensions of the image before uploading it to the server. They can also store the images in a secure directory outside the web root to prevent direct access. Finally, developers should use appropriate HTML and CSS to display the images on their websites. 

<?php
// Validate image file type, size, and dimensions
$allowed_types = array('image/jpeg', 'image/png', 'image/gif');
$max_size = 5 * 1024 * 1024; // 5MB
$max_width = 800;
$max_height = 600;

if (in_array($_FILES['image']['type'], $allowed_types) && $_FILES['image']['size'] <= $max_size) {
    list($width, $height) = getimagesize($_FILES['image']['tmp_name']);
    
    if ($width <= $max_width && $height <= $max_height) {
        // Store image in a secure directory outside the web root
        $upload_dir = '/path/to/secure/directory/';
        $upload_file = $upload_dir . basename($_FILES['image']['name']);
        
        if (move_uploaded_file($_FILES['image']['tmp_name'], $upload_file)) {
            echo 'Image uploaded successfully.';
        } else {
            echo 'Error uploading image.';
        }
    } else {
        echo 'Image dimensions exceed maximum allowed.';
    }
} else {
    echo 'Invalid image file type or size.';
}
?>

Keywords

file upload image processing move_uploaded_file imagejpeg GD library

Related Questions