Web上传文件的安全方式

Web上传文件的安全方式

1.简单的文件上传表单
    一个简单的文件上传表单通常包含一个HTML表单和 PHP脚本.
  HTML Form:        

<form enctype="multipart/form-data" action="uploader.php" method="POST">
<input type="hidden" name="MAX_FILE_SIZE" value="1000000">
Choose a file to upload:<input name="uploadedfile" type="file" /><br />
<input type="Submit" value="Upload File"/>
</form>
PHP Code:
<?php
$target_path="uploads/";
$target_path=$target_path.basename($FILES($_FILES['uploadedfile']['name']));
if(move_uploader_file($_FILES['uploadedfile']['name'])){
echo "The file". basename($_FILES['uploadedfile']['name']). "has been uploaded";
echo "There was an error uploading the file,please try again!";
}
?>