parent.uploadFailed();'; } else { // prevent users from traversing outside the base directory $directory = realpath(BASEDIR . $_POST['directory']); $target = $directory . '/' . $_FILES['file']['name']; if (move_uploaded_file($_FILES['file']['tmp_name'], $target)) { echo ''; } else { echo ''; } } ?>