Pulling my hair out. Can't seem to get a file to upload.

Phrank

We are going to host our own website. I built up a windows 2003 server. Installed IIS. I am working on file upload to our website. I can get files to upload to c:\Temp but not to c:\Inetpub\wwwroot\ourwebsite\upload.

I even set up the upload directory for full sharing with write permissions. Still no help.

Here is my upload code:

<form enctype="multipart/form-data" action="uploadtest.php" method="POST">
    <!-- MAX_FILE_SIZE must precede the file input field -->
    <input type="hidden" name="MAX_FILE_SIZE" value="300000" />
    <!-- Name of input element determines name in $_FILES array -->
    Send this file: <input name="userfile" type="file" />
    <input type="submit" value="Send File" />
</form>

LIke I say it can upload files to c:\Temp which is read only.

Here is my uploadtest code. uploadtest.php

$uploaddir =  "upload\\";
echo '<pre>';
echo "<br />Here is the temporary file --------------------" . $_FILES['userfile']['tmp_name'] . "<br />";
echo "<br />Here is the upload file=====" . $uploadfile . "<br />";
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
    echo "File is valid, and was successfully uploaded.\n";
} else {
    echo "Possible file upload attack!\n";
}
echo 'Here is some more debugging info:';
print_r($_FILES);

print "</pre>";

Unless I make the uploadir = "C:\Temp\" it will not work.

Any help would be greatly appreciated.

bpat1434

First thing I see wrong is the fact that $uploadfile isn't defined anywhere. So you're not really moving the image anywhere.

Also, it's okay to use forward slashes on Windows. Windows will "translate" them into backslashes automatically for you.

Phrank

Here is whole code.

Tried both forward and backward slashes.

<?php
// In PHP versions earlier than 4.1.0, $HTTP_POST_FILES should be used instead
// of $_FILES.


$uploaddir =  "upload\\"; //
//$uploaddir =  "C:/Temp/";
// '/var/www/uploads/';
echo "<br />Here is the upload file before stripping the path off ---------------" . $_FILES['userfile']['name'] . "<br />";
$uploadfile = $uploaddir . basename($_FILES['userfile']['name']);

echo '<pre>';
//echo "<br />$_FILES['userfile']['tmp_name']=" . $_FILES['userfile']['tmp_name'];
echo "<br />Here is the temporary file --------------------" . $_FILES['userfile']['tmp_name'] . "<br />";
echo "<br />Here is the upload file=====" . $uploadfile . "<br />";
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
    echo "File is valid, and was successfully uploaded.\n";
} else {
    echo "Possible file upload attack!\n";
}

echo 'Here is some more debugging info:';
print_r($_FILES);

print "</pre>";

?>

bpat1434

Okay, so the general questions.

Have you tried using "$uploaddir = './upload/';" instead of "$uploaddir = 'upload\';"?
Does the server have write permissions to that folder?
Have you tried changing the folder permissions to be 100% open (777)?

Hopefully one of those will be the solution 😉

Phrank

Brought up the upload directiry in windows explorer - went to sharing and gave it full permissions. Opened the IIS Manager and gave the upload directory all permissions.

Still will not work.

Gotta be something easy.

I can't think of anyway to give the upload directory any more permissions.

Server still works if I make the upload directory c:\Temp but I can't read from that directory for some reason in my program.

I know that Inetpub and wwwroot are readonly. I take that off but it comes back on.

Still pulling my hair out. 🙁

bpat1434

C:\Temp\ should be the temporary upload directory. The place where files are stored prior to your script checking them and manipulating them and eventually moving them. If you can't move the file from C:\Temp to wherever on the filesystem, then it has to be a permissions issue.

Is it possible that you have some open_basedir restrictions in effect? That could be blocking the movement of the file.