m

certif.cer

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

removeBackground.php

+<?php
+// Generated by curl-to-PHP: http://incarnate.github.io/curl-to-php/
+// if($_SERVER["REQUEST_METHOD"] == "POST")
+// {
+//     if(isset($_FILES["photo"]) && $_FILES["photo"]["error"] == 0)
+//     {
+        // $allowed = array("jpg" => "image/jpeg", "png" => "image/png");
+        // $filename = $_FILES["photo"]["name"];
+        // $filetype = $_FILES["photo"]["type"];
+        
+        // $ext = pathinfo($filename, PATHINFO_EXTENSION);
+        // if(array_key_exists($ext, $allowed))
+        // {
+            $ch = curl_init();
+            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+            // curl_setopt($ch, CURLOPT_CAINFO,__DIR__ . DIRECTORY_SEPARATOR . 'certif.cer');
+            curl_setopt($ch, CURLOPT_URL, 'https://api.remove.bg/v1.0/removebg');
+            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
+            curl_setopt($ch, CURLOPT_POST, 1);
+            $post = array(
+                // 'image_file' => '@' .realpath('/img'.$_FILES["photo"]["name"]),
+                'image_file' => '/img/pierremarque.jpg',
+                'size' => 'auto'
+            );
+            curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
+
+            $headers = array();
+            $headers[] = 'X-Api-Key: Es8bAw68rDddjoK47i9EASEy';
+            curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
+
+            $result = curl_exec($ch);
+            if (curl_errno($ch)) {
+                echo 'Error:' . curl_error($ch);
+            }
+            curl_close($ch);
+            // $fp = fopen($_FILES["photo"]["name"]."no-bg.png", "wb");
+            $fp = fopen("no-bg.png", "wb");
+            fwrite($fp, $result);
+            fclose($fp);
+        // }
+//     }
+// }
+?>
\ No newline at end of file

upload.php

@@ -10,7 +10,7 @@ if($_SERVER["REQUEST_METHOD"] == "POST")
     if(isset($_FILES["photo"]) && $_FILES["photo"]["error"] == 0)
     {
         $allowed = array("jpg" => "image/jpeg", "png" => "image/png");
-        $filename = $_FILES["photo"]["name"];
+        $filename = htmlspecialchars(trim($_FILES["photo"]["name"]));// évite les noms de fichiers trop exotiques 
         $filetype = $_FILES["photo"]["type"];
         $filesize = $_FILES["photo"]["size"];
         $message = "";