[Resolved] upload script doesn't upload file

[dud3r]

I was using an upload script on one server, let's call it server "a". Now, I moved to another server, let's call it server "b". The script was unchanged. However, what works on server a, doesn't work on server b.
Server "a" runs php version 4.3.10. Server "b" runs php version 4.3.3.

Here's the form I use:

echo "<form action=upload_pic.php method=\"post\" enctype=\"multipart/form-data\">";
echo "<INPUT TYPE=hidden name=do value=main_pic>";
echo "<INPUT TYPE=hidden name=username value='".$_COOKIE['Username']."'>";
echo "Select a picture to be uploaded:";
echo "<br>";
echo "<input class=bginput type=file name=file_field_main> <input class=button type=submit value=\"Upload Picture\">"; 
echo "</form> ";

Here's the upload script:

if($do=="main_pic"){
move_uploaded_file($_FILES['file_field_main']
['tmp_name'], "/var/www/html/pictures/".$files_name);
}

I omitted out obvious/irrelevant parts, of course.

Can anyone shed some light on this? Thanks.

[jesus_hairdo]

It would probably be easier to diagnose the problem if you explain exactly what happens when you try and upload a file. (including all error messages)

In the meantime, here are a couple of things to check-

does '/var/www/html/pictures/' exist on server b.

does the webserver user (usually nobody or apache) have write access to /var/www/html/pictures/.

Check php.ini (/etc/php.ini in most linuxes) for the "file_uploads" directive, this needs to '=on'
Also check the upload_max_filesize directive to see if the files being uploaded are too large.

[bradgrafelman]

Also, change your code to this:

$do = @$_POST['do'];
if($do=="main_pic"){ 
move_uploaded_file($_FILES['file_field_main'] 
['tmp_name'], "/var/www/html/pictures/".$_FILES['file_field_main'] 
['name']); 
}

Two differences:

1. If register_globals is set to 'Off' (as it should be in any good production environment), $do won't get automatically populated from POST data.

2. I don't know where $files_name was coming from... so I changed it to the original filename of the file being uploaded (found in the $_FILES[] superglobal array).

[dud3r]

Checked both of them. File uploads are on. Register globals are also on. I don't know what the problem could be. I changed the CMOD of /pictures/ to 777 and it still don't upload.

I don't know if this matters but the only differences between the two servers are the versions and server 'a' runs freebsd but server 'b' runs linux.

[dud3r]

I just found what the problem is. I didn't see this error before, but when I tried to upload a file using another script, here's what I got:

Warning: move_uploaded_file(): SAFE MODE Restriction in effect. The script whose uid is 712 is not allowed to access /var/www/html owned by uid 0

I guess I should contact the helpdesk and ask them what I can do about it.

[bradgrafelman]

With the settnigs you told me, it shouldn't matter.

Try this code:

$do = @$_POST['do']; 
if($do=="main_pic"){  

if(!move_uploaded_file($_FILES['file_field_main']  

['tmp_name'], "/var/www/html/pictures/".$_FILES['file_field_main']  

['name'])) die('Error moving file!');
echo 'Errors: ' . $_FILES['file_field_main']['error'];
}

[dud3r]

I didn't try the above code yet, but I'd think that with that "Safe mode" thing it won't work.

[bradgrafelman]

"Safe mode" thing? Do you have Safe Mode enabled?

[dud3r]

It's not my server. I'm hosted on it.
How do I disable it? It's not php safe mode because in php.ini safe mode is off.

[bradgrafelman]

I'm just confused why you were asking about a "Safe Mode" thing.

Try the above code and let us know what the output was (or give us a link)

[dud3r]

Nevermind. I was using the wrong path. I emailed tech support and was able to straighten it out.
Thanks for your help guys.