[RESOLVED] Go Figure With This.

brendan2b

So on my username on my site I can upload pictures just fine. On my friends username he cannot upload pictures because of a warning stating that it cannot move the temporary file to the folder and rename it. Both folders have chmod 777.

When my friend uses my username on his computer he can upload, but on his username he cant, cause of a folder issue. Now boht usernames have all permissions in their respective folders.

This is the error...

Warning: move_uploaded_file(photos/emmy22/132419507sss3_l.jpg): failed to open stream: No such file or directory in /home/photocoo/public_html/uploadSuccess.php on line 164

Warning: move_uploaded_file(): Unable to move '/var/tmp/phpCQg1pM' to 'photos/emmy22/132419507sss3_l.jpg' in /home/photocoo/public_html/uploadSuccess.php on line 164

And I have is_uploaded_file checked and it comes through as the file is there. It just somehow cannot seem to move the file for certain usernames. Any advice?

Any help would be very helpful.

sneakyimp

keep in mind that move_uploaded_file takes two args...the FIRST arg is the existing temporary filename, the 2nd arg is where you want to put it. It would be helpful to see your source code.

another potential error is that the destination directory for your friend doesn't yet exist.

brendan2b

Ok here is my code.

$getimagesize = getimagesize($_FILES['upload']['tmp_name']);


if ($getimagesize != true)
	{
				echo "<span class='style22'>There was a problem with your image. Please try uploading it again.</span>";
	} 
else
{
$target = 'photos/'.$_SESSION['username'];
$target = $target ."/". basename($_FILES['upload']['name']) ;
$_SESSION['extension']=$extension;

if (($extension == "jpg") || ($extension == "gif") || ($extension == "jpeg") || ($extension == "png"))
{
	if ($_FILES['upload']['size'] < 512000)
	{
		if (is_uploaded_file($_FILES['upload']['tmp_name']))
		{

		if(move_uploaded_file($_FILES['upload']['tmp_name'], $target))
		{

		$name = $_FILES['upload']['name'];
		$_SESSION['name'] = $name;
		$imageSize = $_FILES['upload']['size'];
		$_SESSION['size'] = $imageSize;
		$type = $_FILES['upload']['type'];
		$_SESSION['type'] = $type;
		$_SESSION['view'] = 1;
		$_SESSION['tmp'] = $_FILES['upload']['tmp_name'];

		print "<span class='style22'>Your file was uploaded successfully.  Click</span>"; 
		?>
		<span class="style22"><a href="successful.php?username=<? echo $username;?>">here</a></span> <? 
		print "<span class='style22'>to return to your album.</span>";

		}
		else
		{ 
		print "<span class='style22'>Your file was not succesfully loaded. Please try again.  If this problem is consistent, please contact our support department. Thanks. </span>";
		 }
	}

	else
		{
		print "<span class='style22'>Your File was not uploaded. Please try again.</span>";
		}
		}
else 
{
print "<span class='style22'> Your file is too big. Make sure your file is less than 1 megabyte before uploading. Thanks.</span>";
}

}
else
{ 
print "<span class='style22'>Invalied File Type! <br><br> Your file must be either a .jpeg .gif or a .png. Thanks. </span>";
}

}

Hope this helps man, thanks for your time.

sneakyimp

i'm guessing the problem is here:

$target = 'photos/'.$_SESSION['username'];
$target = $target ."/". basename($_FILES['upload']['name']) ;

After setting your target, you don't check to make sure that
the target directory actually exists -- try is_dir()
there isn't already a file there with that name
* the permissions are such that you are permitted to write this file in this location

you should also be worried about users picking names like ../../../.htpasswd or some other sensitive file that they could simply overwrite

try checking the value of $target...does that directory location exist? what are the permissions on that file?

brendan2b

Well Im probably gunna create a loop asking if it exists, and if it doesnt, create it in the loop until it does exist. Then move the file over. Would that work?

brendan2b

And also people have registered and I have seen the folder that is created when they register and that message still comes up. Like it says it cannot move it, but the folder IS there. I dont know how that could be a problem. Please help. Thanks.

brendan2b

I guess ill abandon the whole folders thing per username, it was a nice organizing idea, but it will clear this warning.

sneakyimp

your inability to write to a particular directory isn't just an issue of whether the directory exists or not, but whether apache has the right permissions to write files to that folder.