file type form submitting to PHP script

shawjames

Okay, I have been wracking my head all day on this one. I made a really simple page to upload a file (submitting to PHP). I have attached the page and script. I put in a print_r command to see the array dump of the HTTP_POST_VARs. Everytime, the array prints nothing. If I change the type=file to type=text, it will print the post vars... but that doesnt do much good. I'm guessing there is something I need to set on my server... the file and directory are CHMOD777.

Any other ideas?

Page:

<HTML>
<body>
<B>File upload</b>
<form enctype="multipart/form-data" action="<?php print $PHP_SELF; ?>" method="post">
Send this file:

<?PHP
print_r ($HTTP_POST_VARS);

$dir="/home/users/web";
if ($userfile){
copy($userfile,$dir.$userfile_name);
if (!is_uploaded_file ($userfile)){
echo "<b>$userfile_name</b> couldn't be copied !!";
}
}

if (is_uploaded_file ($userfile)){
echo "<b>$userfile_name</b> copied succesfully !!";
}
?>
</html>

cgraz

http://www.php.net/manual/en/features.file-upload.php

For files use $HTTP_POST_FILES

secondly, (assuming instead of input type = text you had input type = file) your input name is filename

but in your script you're checking for $userfile. Shouldn't you be checking for $filename?

Cgraz

shawjames

Okay, I studied up and fixed my script. I used the examples in the manual exactly, and still cannot get any file to upload. Here is what I have. I am using PHP4.0.6:

<HTML><body>
<form enctype="multipart/form-data" action="<?php print $PHP_SELF; ?>" method="post">
Send this file: <input name="userfile" type="file"><br>
<input type="submit" name="submit" value="Send File"><hr>
</form>
</body>
<pre>
<?PHP
if (move_uploaded_file($HTTP_POST_FILES['userfile']['tmp_name'], $HTTP_POST_FILES['userfile']['name'])) {
print "File is valid, and was successfully uploaded. Here's some more debugging info:\n";
print_r($HTTP_POST_FILES);
} else {
print "Possible file upload attack! Here's some debugging info:\n";
print_r($HTTP_POST_FILES);
}
?>
</html>

cgraz

are you getting an error? besides the file not being placed on the server, what's going wrong/not working?

You also forgot to mention the path where to upload in move_uploaded_file()

all you have is the file name in the 2nd parameter. PHP doesn't know where to upload to.

Cgraz

shawjames

I found the problem... I had moved a root directory that allowed file uploads from php

Silly me 😃