要有效處理PHP中的文件上傳，需依次執(zhí)行以下步驟：首先檢查文件是否成功上傳，通過(guò)判斷$_FILES['fileToUpload']['error']是否等於UPLOAD_ERR_OK；其次，理解$_FILES數(shù)組包含的文件信息，如name、type、tmp_name、error和size；接著，使用move_uploaded_file()函數(shù)將文件從臨時(shí)路徑移動(dòng)到指定目錄，並確保目標(biāo)目錄可寫(xiě)及文件名安全；最後，若需支持多文件上傳，應(yīng)在HTML中設(shè)置name屬性為數(shù)組形式，並在PHP中遍歷處理每個(gè)文件。正確使用$_FILES並結(jié)合驗(yàn)證與安全措施，才能完成完整的文件上傳流程。

When you're handling file uploads in PHP, the $_FILES superglobal is where you'll find all the details about the uploaded file. It contains information like the file name, type, size, temporary storage path, and any errors that occurred during the upload.

Here's how to use it effectively:

Check if a File Was Uploaded

Before doing anything with $_FILES , make sure a file was actually uploaded. You can check this by looking at the error key. If it's set to UPLOAD_ERR_OK , then the upload was successful.

 if ($_FILES['fileToUpload']['error'] === UPLOAD_ERR_OK) {
    // Proceed with handling the file
}

Note: The index 'fileToUpload' corresponds to the name attribute of your HTML input element:

 <input type="file" name="fileToUpload">

Also keep in mind that for file uploads to work properly, your form must have the attribute enctype="multipart/form-data" .

Understand What $_FILES Contains

Each uploaded file will give you an array with these keys:

• name – the original name of the file on the user's computer
• type – the MIME type (not always reliable)
• tmp_name – the temporary filename stored on the server
• error – any error code from the upload process
• size – the size of the uploaded file in bytes

For example:

 echo 'Original Name: ' . $_FILES['fileToUpload']['name'];
echo 'Size: ' . $_FILES['fileToUpload']['size'] . ' bytes';
echo 'Temporary Path: ' . $_FILES['fileToUpload']['tmp_name'];

You might want to log or inspect the contents of $_FILES while debugging:

 print_r($_FILES);

Move the Uploaded File to a Permanent Location

Uploaded files are stored in a temporary directory and will be deleted at the end of the request unless you move them.

Use move_uploaded_file() to save the file permanently:

 $uploadDir = 'uploads/';
$uploadFile = $uploadDir . basename($_FILES['fileToUpload']['name']);

if (move_uploaded_file($_FILES['fileToUpload']['tmp_name'], $uploadFile)) {
    echo "File is valid and was uploaded successfully.";
} else {
    echo "Possible file upload attack!";
}

A few things to watch out for:

• Make sure the target directory exists and is writable by the web server.
• Avoid using user-provided filenames directly — sanitize or rename them to prevent overwriting existing files or security issues.
• Consider checking the file type or limiting the maximum upload size via PHP settings ( upload_max_filesize , post_max_size ) or script-level checks.

Handle Multiple File Uploads

If you allow users to upload multiple files, you need to structure your input like this:

 <input type="file" name="filesToUpload[]" multiple>

Then loop through the $_FILES array:

 foreach ($_FILES['filesToUpload']['name'] as $index => $name) {
    $tmpName = $_FILES['filesToUpload']['tmp_name'][$index];
    if (is_uploaded_file($tmpName)) {
        move_uploaded_file($tmpName, "uploads/" . $name);
    }
}

This way, each selected file gets processed individually.

That's basically how you use $_FILES . It gives you all the info you need, but you still have to handle moving, validating, and securing the upload yourself.

以上是如何使用$ _FILES SUPEREGLOBAL訪問(wèn)上傳的文件信息？的詳細(xì)內(nèi)容。更多資訊請(qǐng)關(guān)注PHP中文網(wǎng)其他相關(guān)文章！