[RESOLVED] uploading to a newly created dir

[mfitzpat]

Hi,
I am new to php and coding in general. PHP-5.1 on Centos-5.3
My goal, to allow users to create new directories and then upload files to these newly created directories. I have .htaccess protected the web page which a specific group of users will use to access the directories/data.

My index.html file -- works fine
Test

<form enctype="multipart/form-data" action="chdir.php" method=POST>
<Create a directory: <input type="text" input name="directory" /><br />
<input type="submit" value="Make Directory" />
</form>

Calls chdir.php -- attached--- which allows me to create a directory and cd to the newly created directory. Works fine, I print out current working dir and it is the newly created dir.

Then within chdir.php, I call the script upload.php to upload the files. (also attached: upload.php).

I have declared a variable in chdir.php $newdir which is the newly created dir that I would like to upload my files to. However, my upload.php script does not recognize the $newdir variable...

Error message: PHP Notice: Undefined variable: newdir in /data/www/html/mef/upload.php on line 3, referer: http://kaya1/mef/chdir.php

I did have the upload.php script working properly as I had the $target hard coded to a specific dir: $target = data/ and the files would go to data/<filename>.. but I would like the files to be uploaded to:
data/$newdir/<filename>

could it be a variable scope issue... or there is probably an easier way to tell the upload.php script which dir to upload to.

had to rename files in order to attach... but the code refers to original names
chdir.php --> chdir.txt
upload.php --> upload.txt

Any help or information appreciated.
Thanks
mef

[halojoy]

I suggest you send it as HIDDEN value along with upload form.

<form enctype="multipart/form-data" action="upload.php" method="POST">
Please choose a file: <input name="uploaded" type="file" /><br />
<input type="hidden" name="newdir" value="<?php echo $newdir ?>">
<input type="submit" value="Upload" />
</form>

And to get it in upload.php
you use

<?php

$newdir = $_POST['newdir'];
echo $newdir;

$target = "data/$newdir";
$target = $target . basename( $_FILES['uploaded']['name']) ;
$ok=1;

[bradgrafelman]

There's no need to change directories - just include the directory in the path you give to move_upload_file() (as halojoy's code does).

Also note that with halojoy's code, you allow the user to upload files to any directory (including those above the current directory - basically anywhere on the server's hard drive that the webserver process has write permissions). If you decide to secure this process in the future, you could use a session to store the directory name.

[mfitzpat]

Using halojoy's info, it worked. Thank you... I had been trying to resolve this for a few days.
I'll also look at the session feature.

Thanks for your help