upload files in SAFE MODE

Anon

Is there any way to do this (i have no access to php.ini or apache config files or anything)

sepodati

Can't you use html forms to upload a file, even in safe mode?

Then use copy() to place it in your directory??

There is a section in the PHP manual that talks about handling file uploads.

---John Holmes...

Anon

Nope, the closest possibility was using the system() function with a simple command line program, as shown in the tutorials somewhere on php.net, but i couldn't make it work. But copy() tells U to take a hike

Anon

You can upload files using copy() in safe mode
I have a script that does it now. You need to
add the following to your httpd.conf file
to do so:

php_admin_value open_basedir "/path/to/directory/httpdocs:/tmp"

If indeed this line is in your httpd.conf file.

Our server runs Plesk as the control panel and
this was our way around it.

Hope this helps.

Regards,
Ray

Anon

This was very interresting.
What does the separate values mean?
php_admin_value open_basedir "/path/to/directory/httpdocs:/tmp"

php_admin_value = ?
open_basedir = ?

I need to add this to my httpd.conf file..

Anon

File Upload with Safe Mode can be handled with move_uploaded_file. Below is an example:

upload.htm:

<head><title>PHP's FileUPLOAD</title></head><body>
<form enctype="multipart/form-data" action="upload.php" method="post">
Send this file: <input name="userfile" type="file">
<input type="submit" value="Send File">
</form>

</body>

upload.php

<?
move_uploaded_file($userfile, "uploaddir/filename");
?>

"uploaddir" directory is directory that has full access (CHMOD 777) in your web dir. And "filename" is the filename that you want to save in the web dir.

Kelly

Anon

This works brilliantly. Except that where does the filename go? $userfile is the raw file data, but how can you use the filename?

<?
move_uploaded_file($userfile, "../files/filename");
?>

...creates a file called 'filename' in the files directory.

Is there another env variable that contains this? or is it lost once the file is posted? I suppose I could use another field and let the user specify the filename...any thoughts?

domien

try this

<?
if ($view == go) {
$file_name = $HTTP_POST_FILES['userfile']['name'];
move_uploaded_file($userfile, $file_name);
}

?>
<head><title>upload.php</title></head><body>
<form enctype="multipart/form-data" action="upload.php?view=go" method="post">
Send this file: <input name="userfile" type="file">
<input type="submit" value="Send File">
</form>

</body>

Anon

I have another problem with SAFE MODE:
I want to create a directory structure on-the-fly, i.e. something like
.../dir_no_54
.../dir_no_54/sub_dir_1
.../dir_no_54/sub_dir_2
.../dir_no_54/sub_dir_3

I manage to get PHP to create the first directory (provided that ../ is CHMOD 777) with mkdir() althogh it doesn't set permissions to 0777 as I tell it to do. I then manage to make it change permissions of this directory (dir_no_54) to 777 as I wanted using chmod(). But this is where trouble starts: If I try to create a directory within dir_no_54 the server constantly refuses to do so by issuing a SAFE MODE error (wrong uid).
Can anyone explain me what the particular problem is in this case and maybe even provide a workaround?