Host doesn't support open_basedir

davidu

Hi!

I've built a websight where the users are able to upload imagefiles.
The maximum imagesize is set to 75 KB and is controlled by GetImageSize before the image is copied to the upload directory.The page and all it's functions is working excellent on my private webserver (RedHat 7.0 and Apache) but yesterday when I did uploaded all phpfiles to the webhost where it's meant to be, and try to upload a picture it said:

"Warning: open_basedir restriction in effect. File is in wrong directory"

I checked phpinfo and realised that they had inactivated the open_basedir since it said: "upload_tmp_dir: no value, no value".

And since GetImageSize checks the file that is supposed to be in the /tmp directroy it didn't work... I've been talking to the staff and they won't change it (secutiry resons and scriptproblems they said).

So to my qustion, does anybody have got any soultion or alternative to GetImageSize?
Or is it possible to check the filesize locally before the file is uploaded to the upload directory or something else?

Thanx in advance!

.\David

Anon

with getImageSize() you can only get the image dimensions of an image (width and height). to check the image size, do after uploading this: (ie the form field name is $file)

<? if ($file_size) > 75000) echo "too big"; ?>

Anon

<? if ($file_size > 75000) echo "too big"; ?>

davidu

Hi!

Thanx for answering but I'm well aware of the functions of GetImageSize. Please read the message again. Sorry if I'm a bad explainer 😉

Maybe I should mension as well that the page also checks the filetype in case that someone would send an exe-file or something.

That's why I want it to be checked BEFORE it's uploaded to the destination directory.

Regards

.\David

Anon

the server can only check the file properties after it is uploaded. just call the same page, check the new generated vars $file_size, $file_type, $file_name. if everything is ok the copy the file from the temp dir to your directory. in case that errors occurs show the form again with error messages.

hope it works

davidu

hehehe, well that's what I tried to explain in the first message. The upload temp directory is deactivated... It's not set.

In that case I suppose it's not possible to check the file since they have disabled the upload_tmp directory...
Thanx for trying to help me anyway!

.\David