library bulletproof {🖫 2,919, ⚐ 19, ★ 262}

samayo/bulletproof

A simple and secure PHP image uploader

Sunday, June 24, 2018
by samayo
Repository
33 Watchers
262 Stars
2,919 Installations

PHP
1 Dependents
0 Suggesters
48 Forks
1 Open issues
19 Versions
8 % Grown

The README.md

BULLETPROOF

, _(*1)

Bulletproof is a single-class PHP library to upload images securely., _(*2)

Installation

Install using git, _(*3)

$ git clone https://github.com/samayo/bulletproof.git

Install using Composer, _(*4)

$ composer require samayo/bulletproof:5.0.*

Or download it manually in a ZIP format, _(*5)

Usage

To quickly upload images, use the following HTML & PHP code:, _(*6)

<form method="POST" enctype="multipart/form-data">
  <input type="hidden" name="MAX_FILE_SIZE" value="1000000"/>
  <input type="file" name="pictures" accept="image/*"/>
  <input type="submit" value="upload"/>
</form>

```php require_once "path/to/bulletproof.php";, _(*7)

$image = new Bulletproof\Image($_FILES);, _(*8)

if($image["pictures"]){ $upload = $image->upload();, _(*9)

if($upload){ echo $upload->getPath(); // uploads/cat.gif }else{ echo $image->getError(); } }, _(*10)

For more options or configurations, check the following examples:


Configs
-----

#### Setting Properties
Methods to set restriction on the image name, size, type, etc.. to upload
```php  
// To provide a name for the image. If unused, image name will be auto-generated.
$image->setName($name);

// To set the min/max image size to upload (in bytes)
$image->setSize($min, $max);

// To define a list of allowed image types to upload
$image->setMime(array('jpeg', 'gif'));

// To set the max image height/width to upload (limit in pixels)
$image->setDimension($width, $height);

// To create a folder name to store the uploaded image, with optional chmod permission
$image->setStorage($folderName, $optionalPermission);

Getting Properties

Methods to retrieve image data before/after upload., _(*11)

// To get the image name
$image->getName();

// To get the image size (in bytes)
$image->getSize();

// To get the image mime (extension)
$image->getMime();

// To get the image width in pixels
$image->getWidth();

// To get the image height in pixels
$image->getHeight();

// To get image location (folder where images are uploaded)
$image->getStorage();

// To get the full image path. ex 'images/logo.jpg'
$image->getPath();

// To get the json format value of all the above information
$image->getJson();

Extended Configuration Usage

How to use the property setters and getters., _(*12)

$image = new Bulletproof\Image($_FILES);

$image->setName("samayo")
      ->setMime(["gif"])
      ->setStorage(__DIR__ . "/avatars");

if($image["pictures"]){
  if($image->upload()){
    echo $image->getName(); // samayo   
    echo $image->getMime(); // gif
    echo $image->getStorage(); // avatars
    echo $image->getPath(); // avatars/samayo.gif
  }
}

Image Manipulation

To crop, resize or watermak images, use functions stored in src/utils, _(*13)

Creating custom errors

Use php exceptions to define custom error responses, _(*14)

if($image['pictures']){
  try {
    if($image->getMime() !== 'png'){
      throw new \Exception('Only PNG image types are allowed');
    }

    // check size, width, height...

    if(!$image->upload()){
      throw new \Exception($image->getError());
    } else {
      echo $image->getPath();
    }

  } catch (\Exception $e){
    echo "Error " . $e->getMessage();
  }
}

What makes this secure?

Uses exif_imagetype() to get the true image mime (.extension)
Uses getimagesize() to check if image has a valid height / width in pixels.
Sanitized images names, strict folder permissions and more...