function file_create_path

Make sure the destination is a complete path and resides in the file system directory, if it is not prepend the file system directory.

Parameters

$dest A string containing the path to verify. If this value is: omitted, Drupal's 'files' directory will be used.

Return value

A string containing the path to file, with file system directory appended if necessary, or FALSE if the path is invalid (i.e. outside the configured 'files' or temp directories).

Related topics

File

includes/file.inc, line 51

API for handling file uploads and server file management.

Code

function file_create_path($dest = 0) {
  $file_path = file_directory_path();
  if (!$dest) {
    return $file_path;
  }

  // file_check_location() checks whether the destination is inside the Drupal files directory.
  if (file_check_location($dest, $file_path)) {
    return $dest;
  }
  else {
    if (file_check_location($dest, file_directory_temp())) {
      return $dest;
    }
    else {
      if (file_check_location($file_path . '/' . $dest, $file_path)) {
        return $file_path . '/' . $dest;
      }
    }
  }

  // File not found.
  return FALSE;
}