Upload Error

[NZ_Kiwis]

I get the error
"Possible file upload attack!"

This is my code.. what is the problem??

<?php

 if ($action == 'save') {

$uploadDir = '/home/httpd/vhosts/mysite.com/httpdocs/';
$uploadFile = $uploadDir . $_FILES['userfile']['name'];
echo $uploadFile;
print "<pre>";
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadFile))
{
    print "File is valid, and was successfully uploaded. ";
}
else
{
print "Possible file upload attack!";
}
print "</pre>";

} else {
?>

<form enctype="multipart/form-data" action="upload.php?action=save" method="post">
    <input type="hidden" name="MAX_FILE_SIZE" value="100000" />
    Choose a file to upload: <input name="userfile" type="file" />
    <input type="submit" value="Upload File" />
</form>
<?php 
}
?>

[drew010]

probably php doesnt have permission to create a file in your directory since php is running as a different username as your files are.
you can echo [man]get_current_user[/man] to see what the php script runs as.

[NZ_Kiwis]

I've run this code

$processUser = posix_getpwuid(posix_geteuid());
print $processUser['name'];
echo "<br>";
echo get_current_user();

and get "apache" for both....

when i look at this part

$uploadDir = '/home/httpd/vhosts/mysute.com/httpdocs/'; 
$uploadFile = $uploadDir . $_FILES[userfile][name]; 
echo $uploadFile;

the echo only has /home/httpd/vhosts/mysute.com/httpdocs/
and no file at the end.... this could be the problem???
If so how do I fix it?

[drew010]

try making a specific folder for the uploads, and chmod it to 777. apache should then be able to make a file in there.

[robert_w_ark]

Do what drew said, chmod your httpdocs to 0777 and it should work 🙂