trouble uploading files to server

srpayne

Hello,

I am having a difficult time uploading files to my server. My php.ini file looks in order and the permissions on my /usr/local/httpd/tmpfiles directory are ok but when i go to upload a file, it produces no error but the file is not on the server.

Here is the upload html code:

body>
<form action="php/upload.php" method="post" enctype="multipart/form-data" name="form1">
<p>
<input type="hidden" name="MAX_FILE_SIZE" value="1000">
<input type="file" name="file">
</p>
<p>
<input type="submit" name="Submit" value="send file">
</p>
</form>
</body>

My php file looks like this:

<?php

echo $file_name;

Just so i can see if the variables are passed correctly. I think i'm missing something obvious but i'm not sure what it is.

Thanks!

undertow

In newer versions of PHP (4.2.x if I'm not mistaken), register_globals is off by default for security reasons. What that feature does is create regular global variables for incoming data (environment, server, POST, GET, and cookie). So probably the reason nothing is getting printed is that register_globals is off, and you should leave it that way. Instead, try something like this:

echo $_FILES["file"]["attr"]

file is the same name you use on the form (<input type="file" name="file">) and attr is the attribute you want (some are size, name, path, etc. but I don't know what they're called).

Check out http://www.php.net/manual/en/features.file-upload.php for more details.

srpayne

Thats the funny thing. Is my variable is echoing just fine. Nothing is being uploaded.

dannys

The MAX_FILE_SIZE seems a little low - 1000bytes? That's less than 1Kb.

Also, try echoing

$_FILES['file']['tmp_name'] - PHP4.1.0+
$HTTP_POST_FILES['file']['tmp_name'] - PHP4.0.x

$file_tmp_name - if you have registered_globals on and the above methods don't work.

Should give you the actual location and name of the uploaded file - you can then copy it to where ever.

undertow

Oh yeah that could be it. Good call, dannys. I always assumed it would be in KB or some more useful unit.

By the way, you shouldn't always rely on that value to keep out large uploads. It is very easy to fool simply by a malicious user rewriting the form without it. There are directives for this in php.ini that can't be fooled, but the whole file has to be uploaded first which will still use your bandwidth.

dannys

I don't usually bother with it anyway - apparently the specs don't even 'require' that the browser supports the tag at all.

dgrinberg

What you are doing seems a little strange to me!!!

When you upload a file like that it gets placed into a temp directory with a temp name!! (I am not sure when it gets cleaned out)

To actually save that file on your server you need to move it to the directory when you want the file to go.

You can use the 'copy' function, but I always recomend using the move_uploaded_file function. As it will work in safe mode (which a lot of servers are running under these days)

Just using the form is not enough to get the file!!!

srpayne

Well, what I am trying to verify, before writing more code is that my files are being uploaded to that temp directory. But maybe thats the problem, its being deleted before I can even see it because i'm choosing not to move it.

when i :

echo $HTTP_POST_FILES['userfile']['tmp_name'];

I get this:

/usr/local/httpd/tmpfiles/phpXe4O2u

So does this mean i need to copy /usr/local/httpd/tmpfiles/phpXe4O2u somewhere and rename it?

Thanks!

Seth

hand

$source = $HTTP_POST_FILES['userfile']['tmp_name'];  

$destination =  "somefile.dat";
copy($source, $destination);