如果文件存在，如何删除文件

Question

I am trying to check if the instance of a filename exists (despite it's extension) and then delete it. Here is what I have that is not working...

$username  = $_POST["data"]["username"];

$mask = '../../files/' . $username . '.*';
if (file_exists($mask)) 
{
unlink ($mask);
} 

Can someone please tell me what I'm doing wrong? I know that the first line is correct because it is being used correctly with other commands. Just not sure about the rest. Using PHP 5.2

Answer 1

Try:

$mask = "../../files/".str_replace("/","",$username).".*";
$glob = glob($mask);
if( $glob && count($glob) == 1) {
    unlink($glob[0]);
}

This starts by making your code just a little safer, so a malicious user can't just go around deleting anything they like. It also refuses to delete stuff if there's more than one file matching. Adjust as needed.

However, a malicious user can still use your code to delete... well, anyone's profile. Might want to guard against that properly ;)