php uploading

digitalecartoon

When I'm writing a simple php script to upload files to my (host's) server, should I worry about the default 30s timeout for the execution of php scripts? If e.g. I want people to be able to upload images with a maximum of 8 mb.

leatherback

Yes

cahva

execution time does not affect on uploads. The only thing to worry about is the memory_limit, post_max_size and upload_max_filesize settings that they are high enough.

EDIT: oh.. There is 1 more thing, max_input_time default is 60 seconds and that should be higher for large uploads.

digitalecartoon

Just read about it on: http://us2.php.net/manual/en/features.file-upload.common-pitfalls.php

Note: max_execution_time only affects the execution time of the script itself. Any time spent on activity that happens outside the execution of the script such as system calls using system(), the sleep() function, database queries, time taken by the file upload process, etc. is not included when determining the maximum time that the script has been running.

So that max_execution_time of 30 seconds shouldn't apply here while uploading?

I can see my host server's phpinfo settings. O.a.:
upload_max_filesize: 16M
post_max_size: 12M
max_execution_time: 30
memory_limit: 16M

So that should be fine for uploading files of about 12 mb?

cahva

Yes.. Ofcourse if the connection is slow, the max_input_time limit can be reached so check that too.

digitalecartoon

max_input_time = -1
Such a negative number then means that it's unlimited?

cahva

Yep.

digitalecartoon

I've made a small php upload script, but am unsure about the chmod settings. For 'public' I can select 'write', so people can upload stuff which would end up in the upload folder set to 'write'. But should I select 'read' and 'execute' for that folder too?

My other folders have r.w.e. unselect settings for 'public'. I understand for the upload folder I should select write, but I'm not sure what would selecting read/execute mean. Does 'read' mean that it's content is downloadable and 'excute' that someone could run e.g. a php script inside it? For just uploading I would then only have to select 'write'?