Pic Upload in safe mode

TomNick

Hi everybody,

I am having problems to run several scripts since I am on a new server with save mode on in php. As far as I know, upload is not working as long as save mode is on. Any idea how to change it in case of particular scripts? I cannot turn save mode off in php.ini.

Thanks for help

Tom 😕

weekender

i'm not sure about actually uploading, but the php commands to copy/move files (i.e. to move an uploaded file from temp to desired location) are restricted.

not sure that you can change the status of safe mode to please like that - surely that would be contradictory to why safe mode is available...?

dgrinberg

Tom,

Safe Mode was not meant to be overly restrictive, it allows you to do file manipulations but only to files with the correct UID and in the right directory. You should not need to turn off safe mode, you should be able to do everything that you want.

In terms of uploading files there are a coulple of things that you can try.

Use the function "move_uploaded_file"

and if you are still having trouble,

Get your webhost to create a tmp directory inside your web site directories.

HTH

TomNick

Hi David,

thanks for your quick reply. I have an dedicated server so I can change whatever I want anywhere. What does it mean by creating a tmp dir? How would it look like?

Thanks

Tom

MrAlaska

tossing in my two cents

I have a server I test on in safe mode which I have no control over. I am able to upload and files fine, but I am not able to CHMOD a directory to 0777. I had to create a subdirectory with my FTP client then set that to 777, which then allowed me to use the copy command but ONLY into that subdirectory.

I haven't played with 'move_uploaded_file', I didn't realize it might be treated different. I am gonna try that method on another file upload issue I have, in a folder I do not WANT to set to 777.

zenon

I think doing an FTP copy doesn't require to share the destination folder to all user, because if you connect the FTP session with a super user you can do all you want in the dest folder

dgrinberg

Originally posted by TomNick

What does it mean by creating a tmp dir? How would it look like?

Tom,

When a file is uploaded to a server (via PHP) it gets placed into temporary folder, with a temporary name (not the actual file name). The temporary upload directory is set in the 'ini' file
upload_tmp_dir

You should be able to do everything that you want, however, via the move_uploaded_file command.

David

PS. You may want to read this
Handling File Uploads

TomNick

Hi David,

yes the move_uploaded_file works but I cannot change 14 scripts which are working on my server, that does not make any sense......also I got a upload_tmp_dir in my php.ini but that obviously means also rewriting the script, right? The funny thing ist, that I also have automaticly configured a open_basedir
but just for testing I switched everything off (Safe Mode and open base), but still having this upload trouble. Here is my configuration, I am really stucked up right now:

open_basedir : usr/local/apache/www/mydomain

upload_tmp_dir: /usr/local/apache/www/mydomain/phptmp

php script location: /usr/local/apache/www/mydomain/html

Tom

dgrinberg

Tom,

What are the exact problems that you are having. To help I need a little more detail. Maybe include some of your code!

From what you have given me, it looks as though your setup is pretty right. Especially since your upload dir is inside your base dir.

Another thing you may want to try is CHMOD you upload dir to 0777.

You shouldn't need to change scripts if you change the tmp dir!

David

MrAlaska

In my case using move_uploaded_file still did not enable me to write to a directory set to 755. I was able to work around my issues with PHP's FTP functions, but since you have control of your server you probably do not need to employ that kind of change in your scripts.

I agree with dgrinberg. Post some more details and there is probably a much simpler work around in your case.

TomNick

Hi everybody,

problem is solved since there was a missing file in the apache config. However, in safe mode, from my experience the upload dir has to be 777.

Thanks a lot to all for your help

Tom

redcircle

It needs to be set to 777 or the directory needs to have been created by the user inwhich the web server has been run from. ie on most servers the user is "nobody"