View of /remove.php

<?php
include("resources/template.php");
print_header();

$filename = basename($_POST['filename']);
$filepath = "/var/www/drop/files/" . $filename;

if(isset($_POST['filename']) && file_exists($filepath)) {
	if(unlink($filepath)) {
		echo "File removed successfully.";
	}else{
		echo "Unable to remove file.";
	}
}
?>
<form action="remove.php" method="POST">
	<input type="text" name="filename" />
	<input type="submit" value="Remove it" />
</form>
<?php
print_footer();
?>