[RESOLVED] Upload error using IE

jansky

i have this code


<html>
<head>
<title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<body>
<?
if (isset($_POST['Submit']))
{
$uplFolder=$_POST['uplFolder'];

echo $uplFolder;
$userfile1 = $_FILES['file']['tmp_name'];
$userfile_name1 = $_FILES['file']['name'];
 if (!copy($userfile1,"$uplFolder$userfile_name1")) {
   echo $userfile1."<br>";
   echo "$uplFolder$userfile_name1";
   echo "<br>";
   echo " found errror";
   }
   else{
   echo "success";}
}
?>
<form action="<?=$_SERVER['PHP_SELF']?>" method="post" enctype="multipart/form-data" name="form1">
  <input type="file" name="file">
  <input type="radio" name="uplFolder" value="
	../../ProdImages/" checked>Product Images Directory (<b>
	../../ProdImages/</b>)<br>
			<input type="radio" name="uplFolder" value="
	../Downloads/">Downloadable Items Directory (<b>
	../Downloads/</b>)<br>
  <input type="submit" name="Submit" value="Submit">
</form>
</body>
</html>

NOW THIS works perfect on any kind of browser but i dont know why it is not working on IE I got this error

Warning: copy( ../../ProdImages/jansample.jpg): failed to open stream: No such file or directory in c:\inetpub\wwwroot\exhaust\Admin\jansample.php on line 17

Any ideas??

Weedpacket

Are you going to tell me seriously that you're embedding literal file paths into your form for any malcontent to alter into anything they want?

jansky

this form is part of the admin so no other user can use. The file paths can be controlled by the admin. I have a table where all the configuration take effect

LoganK

SQL injection to get into the admin...

Then change the values of the radio buttons using JS before sending it back to the server.

jansky

Thanks guys
This problem resolved it is not actually the php but the radio button itself

<input type="radio" name="uplFolder" value="
../../ProdImages/" checked>Product Images Directory (<b>
../../ProdImages/</b>)<br>
<input type="radio" name="uplFolder" value="
../Downloads/">Downloadable Items Directory (<b>
../Downloads/</b>)<br>

there is a next line under value
But why is it netscape accept this and the IE does not?
when i just used

$location=$_POST['upLfolder];

and this works in IE

$location=trim($_POST['upLfolder];

LoganK

Glad you got it resolved!

Weedpacket

jansky wrote:
But why is it netscape accept this and the IE does not?[/code]

It's the newline in the value after the ". The standard says clients are supposed to strip whitespace from the beginning and end of attribute values (http://www.w3.org/TR/html/#h-4.7). Netscape is complying with this, IE isn't.

LoganK

Weedpacket wrote:
Netscape is complying with this, IE isn't.

Just more examples of Microsoft's "perfect" uncooperation with standards.