[Resolved] File Uploads

nt04

I'm trying upload a file using PHP4

I'm running it on IIS5.1/PHP4 ISAPI version.

I have given write permission to the temp upload folder and the folder I want move the file to.

When I upload the file the following php line of code returns none

echo $HTTP_POST_FILES['uploadfile']['tmp_name'];

Therefore using the function is_uploaded_file fails as the variable above does not refer to any file.

any suggestions where i am going wrong.

Thanks
nt

twilson

Well first, you can save on code by just using $_FILES instead of $HTTP_POST_FILES (which is deprecated anyway).

Second, post the HTML for the FORM so we can look at it. The FORM tags as well as the INPUT tags for the file.

Peace,
Tom

nt04

Okay - fair enough about using $_FILES - I had tried that as well but it didn't work either.

I've posted the HTML form below.

Thanks for the help

<form name="fName" enctype="multipart/form-data" method="post" action="upload_submit.php">
<input type="hidden" name="MAX_FILE_SIZE" value="200000">
<table cellspacing="0" cellpadding="2" border="1">
<tr>
<td>
Select file:
</td>
<td>
<input type="file" name="uploadfile">
</td>
</tr>
<tr>
<td colspan="2" align="right">
<input type="submit" name="submit1" value="Upload">
</td>
</tr>
</table>
</form>

ericbb

did you read this? it explains all!
Handling file uploads

twilson

Try:

is_uploaded_file($_FILES['uploadfile'])

That should work. And yes, read that entire manual over. If you are conviced you are doing it right, check to see if your host/server is configured to allow file upload.

Peace,
Tom

nt04

Yes I have read the manual - as I said in the first post $_FILES['uploadfile']['tmp_name'] returns the value 'none' so the function is_uploaded_file returns false.

I'm running this localhost so there should be no problem with permissions and I think the server is set-up right but I'm open to suggestions.

I've checked the php.ini and file uploads are switched on and I've set the tmp upload directory and given the IUSR_COMPUTERNAME write permissions to that folder.

Thanks

twilson

I think I'm gonna have to sit back on this one from here then. I unfortunately have never run PHP on an IIS box, so I'm at a loss. 🙁

Sorry,
Tom 🙁

nt04

Thanks for your help anyway - it's going to be something silly in the config of PHP or something like that (i think the code is right)

I'm going blind looking at it so maybe it will be obvious tomorrow😃

thanks
nt

ericbb

I had problems running the example code when I started with this the first time. It turned out to be a rights matter.

a suggestion: check while using a ftp client or with the command prompt if the folder settings are truly rwxrwxrwx. That turned out to be my problem.

I tested this on linux though and on the webserver of my customer (IIS) it worked right from the start.

twilson

Originally posted by ericbb
I had problems running the example code when I started with this the first time. It turned out to be a rights matter.

a suggestion: check while using a ftp client or with the command prompt if the folder settings are truly rwxrwxrwx. That turned out to be my problem.

I tested this on linux though and on the webserver of my customer (IIS) it worked right from the start.

Yeah, since PHP does not run as a user that has privleges (for security reasons) any folder that you are writing to must be chmod 777 (as eric stated), unless you are using a wrapper.

ericbb

well, I am a relative newbie myself zo I don't know what a wrapper is. Maybe you can explain that a bit more if necessary and otherwise privately.

What I DO know is that the chmod command won't work on IIS. So you'll have to set the rights on that folder from within windows.. ( unfortunately, I should say).

All users should have full acces on that folder (I think) is the windows deal...

twilson

A wrapper is a CGI program (usually) that allows PHP to run as a user on the box, therefore giving PHP ownership access to all your files (which can be very dangerous if used incorrectly).

But that's on a unix/linux box, I don't know about Windows. 🙁

nt04

Think it is something to do with permissions - not sure if the PHP is finding the php.ini file - I might try the windows forum to see where I'm going wrong.

Thanks 🙂

ericbb

you can check the php.ini with phpinfo()

nt04

Originally posted by ericbb
you can check the php.ini with phpinfo()

I've checked phpinfo and the php.ini file is in the correct place and its got the tmp upload folder i've set in the php.ini file so I really haven't got a clue what is wrong.

ericbb

can you show the code of upload_submit.php?

nt04

I've got it working now - thanks
It was a problem with the windows path to where the file should be moved to
i.e. d:\web\phptest\

Anyone trying to this with windows - you need to reference the full physical path and not just the virtual path you will also need the additional back slash's - the forum is removing the addtional back slash's in the example below.

<?php


$uploaddir = 'd:\\web\\phptest\\uploads\\';
$uploadfile = $uploaddir . $_FILES['uploadfile']['name'];

print "<pre>";
if (move_uploaded_file($_FILES['uploadfile']['tmp_name'], $uploadfile)) {
   print "File is valid, and was successfully uploaded. ";
   print "Here's some more debugging info:\n";
   print_r($_FILES);
} else {
   print "Possible file upload attack!  Here's some debugging info:\n";
   print_r($_FILES);
}
print "</pre>";

?>

ericbb

cool!!
:p

ericbb

if the uploaddir is within the directory where your website sits, it should also work like ../uploaddir or something. Works fine for me on IIS...