What are the common pitfalls when using move_uploaded_file() function in PHP?

One common pitfall when using the move_uploaded_file() function in PHP is not checking for errors during the file upload process. It is important to validate the file before moving it to the desired location to prevent security vulnerabilities. Additionally, make sure to specify the correct file path and destination directory to avoid any file path errors. 

// Check if file upload is successful and move the file to the desired location
if ($_FILES['file']['error'] === UPLOAD_ERR_OK) {
    $uploadDir = 'uploads/';
    $uploadFile = $uploadDir . basename($_FILES['file']['name']);
    
    if (move_uploaded_file($_FILES['file']['tmp_name'], $uploadFile)) {
        echo "File uploaded successfully.";
    } else {
        echo "Error moving file.";
    }
} else {
    echo "File upload failed with error code: " . $_FILES['file']['error'];
}

Keywords

move_uploaded_file PHP file upload security permissions

Related Questions