I'm sorry, I thought you could view the source.
#!/usr/bin/perl -wT
use strict;
use CGI;
use CGI::Carp qw ( fatalsToBrowser );
use File::Basename;
$CGI::POST_MAX = 1024 * 2000000;
my $safe_filename_characters = "a-zA-Z0-9_.-";
my $upload_dir = "/jessethegreat.com";
my $query = new CGI;
my $filename = $query->param("file");
my $email_address = $query->param("username");
if ( !$filename )
{
print $query->header ( );
print "File sizes will be temporarily limited to 2GB. ";
exit;
}
my ( $name, $path, $extension ) = fileparse ( $filename, '\..*' );
$filename = $name . $extension;
$filename =~ tr/ /_/;
$filename =~ s/[^$safe_filename_characters]//g;
if ( $filename =~ /^([$safe_filename_characters]+)$/ )
{
$filename = $1;
}
else
{
die "Filename contains charcters I am not currently allowing. Just name it with number and letters like a normal person.";
my $upload_filehandle = $query->upload("file");
open ( UPLOADFILE, ">$upload_dir/$filename" ) or die "$!";
binmode UPLOADFILE;
while ( <$upload_filehandle> )
{
print UPLOADFILE;
}
close UPLOADFILE;
}
print $query->header ( );
print <<END_HTML;
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Thanks!</title>
<style type="text/css">
img {border: none;}
</style>
</head>
<body>
<p>It worked.</p>
<p>Username: $email_address</p>
<p>File:</p>
<p><a href="/upload/$filename"> Click here to view</p>
</body>
</html>
END_HTML
