Warning: Unable to open '' for reading

[Kudose]

Warning: Unable to open '' for reading: No such file or directory in /users/ionichost.com/kudose/uploader.php on line 10

is the error I get on this script.

Here is the form script:

<? 
include('hiddencode.php');
include('top.php');
include('left.php'); ?>
<FORM ENCTYPE="multipart/form-data" ACTION="uploader.php" METHOD="POST">
<input type="hidden" name="MAX_FILE_SIZE" value="200000">
The file: <INPUT TYPE="file" NAME="userfile">
<INPUT TYPE="submit" VALUE="Upload">
</FORM>
<?
include('bottom.php');
?>

Here is the action script.

<?

$uploaddir = '/cars';
$uploadfile = $uploaddir . $HTTP_POST_FILES['userfile']['name'];

print "<pre>";
if (copy($HTTP_POST_FILES['userfile']['tmp_name'], $uploadfile)) {
   print "File is valid, and was successfully uploaded. ";
   print "Here's some more debugging info:\n";
   print_r($HTTP_POST_FILES);
} else {
   print "Possible file upload attack!  Here's some debugging info:\n";
   print_r($HTTP_POST_FILES) or die(mysql_error());
}
print "</pre>";

?> 

I have the cars dir set to CHMOD 777 and my abolute path is listed in the warning. Can anyone help out?

Thanks.

[Weedpacket]

1) Are you doing this inside a function?
2) Have you considered using [man]move_uploaded_file[/man] as an added safety measure?
3) What is the result of print_r()
4) What is the mysql_error() for when there is no mysql activity?

[Kudose]

No, this is not inside a function. It is an independant page to only upload an image. The mysql_error() function is what told me the error, otherwise it just give the else return and uploads nothing.

The result of print_r() is nothing as well. It gives no errors and does nothing. That's why I through in mysql_error() just to see something.

You can see it in action @ http://kudose.ionichost.com/upload.php

[Kudose]

Now using this code

 <? 

$uploaddir = '/cars'; 
$uploadfile = $uploaddir . $HTTP_POST_FILES['userfile']['name']; 

print "<pre>"; 
if (copy($HTTP_POST_FILES['userfile']['tmp_name'], $uploadfile)) //Get error code here in the if statement
{ 
   print "File is valid, and was successfully uploaded. "; 
   print "Here's some more debugging info:\n"; 
   print_r($HTTP_POST_FILES); 
} else { 
   print "Possible file upload attack!  Here's some debugging info:\n"; 
   print_r($HTTP_POST_FILES); 
} 
print "</pre>"; 

?>  

I get this error

Warning: Unable to open '' for reading: No such file or directory in /users/ionichost.com/kudose/uploader.php on line 7
Possible file upload attack! Here's some debugging info:
Array
(
)

[Weedpacket]

Originally posted by Kudose
The mysql_error() function is what told me the error

No it didn't; [man]mysql_error[/man] (as the name implies) reports error messages returned by MySQL as the result of bad queries. The error message you're getting is coming from PHP.

The emptiness of $HTTP_POST_FILES (are you using a version of PHP older than 4.1?) suggests that the file was never actually uploaded. Check that you're actually allowed to (there are several configuration directives in php.ini that affect file uploads.)
Oh well, I'm just giving suggestions from the manual; I can see from your code you've already read that part.

/cars - that's an odd place to upload files to. Shouldn't it be e.g., somewhere in your user's directory tree?