[RESOLVED] Form to upload files to server?

[conjurer]

I am trying to figure out how to setup a simple form so someone can upload a file to the server. I have someone out of town I am working on a site for, and want an easy mechanism for them to transfer files to me, images and word docs so I can then pull them into the site.

I am planning to create a folder with a password control to grant them access.

Then I envision a simple form like this:

<form action="doupload.php" method="post">
<input name="file1" type="file">
<input name="file2" type="file">
<input name="file3" type="file">
<input name="file_etc" type="file">
</form>
<input name="Submit" type="button" value="Submit">
</form>

So my question is, in the doupload.php file what would I need to do to have it take the files and load them into the folder on the server?

I have done quite a bit with php but never tried to have it upload a file. Anyone know some examples or tutorials I could look at?

Thanks

[Flyier]

You can use something like this :

<?php

$upl_path = "./";

if (isset($_POST["f_upload"])) {

  $files = $_FILES['file'];

  foreach ($files['name'] as $idx=>$file) {

 $file_name = $files['name'][$idx];
 $file_name = strtolower($file_name);
 $file_name = preg_replace('/[^a-z0-9_.]/i', '', $file_name);
 $file_size= intval($files['size'][$idx]);
 $tmp_file = $files['tmp_name'][$idx];

 $copy = copy($tmp_file,$upl_path.$file_name);

 if($copy)  {  

    echo ("Files uploaded successfully!<br />\n"); 

 }

 if(!$copy && $file_name != '') {

    echo ("<b>An error occoured while uploading the files!<br />\n");

 }

  } 

  echo ("<a href='". $_SERVER["PHP_SELF"] ."'>Continue...</a>");

}  

 if (!isset($_POST["f_upload"])) {

   echo ("<form action='". $_SERVER["PHP_SELF"] ."' method='post'  

   enctype='multipart/form-data'>\n");
   echo ("<b>Files To Be Uploaded:</b>\n");
   echo ("<br />\n");
   echo ("<input name='file[]' type='file' id='txt-input' />\n");
   echo ("<br />\n");
   echo ("<input name='file[]' type='file' id='txt-input' />\n");
   echo ("<br />\n");
   echo ("<input name='file[]' type='file' id='txt-input' />\n");
   echo ("<br />\n");
   echo ("<input name='file[]' type='file' id='txt-input' />\n");
   echo ("<br />\n");
   echo ("<input name='file[]' type='file' id='txt-input' />\n");
   echo ("<br /><br />\n");
   echo ("<input name='f_upload' type='submit' value='Upload' id='submit' />\n");
   echo ("</form>\n");

}

?>

[conjurer]

That looks very cool! Thanks!

While I can decipher most of that, (certainly wouldn't have know where to start on writing that: WOW!) what does the preg line do?

$file_name = preg_replace('/[^{a-z0-9_.]/i',} '', $file_name);

Thanks for helping me out here! This looks way cool.

[bradgrafelman]

Replaces any character that is NOT a-z, 0-9, a period, or underscore, with nothing ('').

Also, if you'll visit the manual page [man]features.file-upload[/man], you'll find that you need to specify the FORM tag's enctype.

[conjurer]

I tried testing that out, got an error message :eek:

Warning: copy(./kim.png) [function.copy]: failed to open stream: Permission denied in /home/consult/public_html/prgr/load_files.php on line 17
An error occoured while uploading the files!
Continue...

Would that most likely be a permissions setting on my server? Anyone know what setting I need to change to let someone add files?

---Moving at glacial speed isn't as slow as it used to be!

[bradgrafelman]

The directory most likely needs to be CHMOD'ed to 766 in order to allow PHP to write to it.

[conjurer]

I got this working when I set the permissions to wide open 777. But I can't access it when it is set to 766 - I get a 403 Fobidden. I am thinking I have to put in something to authenticate who the user is.

So if I wanted to just do a simple system user name in .htaccess how do you do that and will that let them access the php file in the folder?

And second question:

The page on the manual says you should add a hidden input like this -

<input type='hidden' name='MAX_FILE_SIZE' value='300000' />

Do you need to put that in the form just once or do you have to do it for each individual input box?

I did it like this and am wondering if I am just being redundant:

   echo ("<input type='hidden' name='MAX_FILE_SIZE' value='300000' />");
   echo ("<input name='file[]' type='file' id='txt-input' />\n");
   echo ("<br />\n");
   echo ("<input type='hidden' name='MAX_FILE_SIZE' value='300000' />");
   echo ("<input name='file[]' type='file' id='txt-input' />\n");
   echo ("<br />\n");
   echo ("<input type='hidden' name='MAX_FILE_SIZE' value='300000' />");
   echo ("<input name='file[]' type='file' id='txt-input' />\n");
   echo ("<br />\n");

[bradgrafelman]

My mistake - go with 777 permissions.

As for the hidden element, you only need it in the form once.