<?php

// error_reporting(0);

$userdir = "uploads/" . md5($_SERVER["REMOTE_ADDR"]);

if (!file_exists($userdir))

{

    mkdir($userdir, 0777, true);

}

/*

这里创建的目录是777的权限，很nice~

*/

file_put_contents($userdir . "/index.php", "");

if (isset($_POST["upload"]))

 {

    $tmp_name = $_FILES["fileUpload"]["tmp_name"];

    $name = $_FILES["fileUpload"]["name"];

    if (!$tmp_name)

   {

        die("filesize too big!");

    }

    if (!$name)

   {

        die("filename cannot be empty!");

    }

    $extension = substr($name, strrpos($name, ".") + 1);

    /*

      得到后缀

    */

    if (preg_match("/ph|htacess/i", $extension))

   {

        die("illegal suffix!");

    }

    /*

        正则过滤 .htacess ,各种php类型，有了一个“i”连大小写绕过都不行

    */

    if (mb_strpos(file_get_contents($tmp_name), "<?") !== FALSE)

   {

        die("<? in contents!");

    }

    /*

        过滤了 " <? " ,这个加上上面一条过滤，htacess的图片马和一句话基本都挂了

    */

    $image_type = exif_imagetype($tmp_name);

    if (!$image_type)

  {

        die("exif_imagetype:not image!");

    }

    /*

        要修改一下 “Content-Type”的值

   */

    $upload_file_path = $userdir . "/" . $name;

    move_uploaded_file($tmp_name, $upload_file_path);

    echo "Your dir " . $userdir. ' <br>';

    echo 'Your files : <br>';

    var_dump(scandir($userdir));

}