Re: Upload is not working ( Permission Problem), I tried a number of ways , still no success!!!!!
| From: | Richard Lynch | Date: | Wed, 01 Dec 2004 20:46:56 +0000 |
| Subject: | Re: Upload is not working ( Permission Problem), I tried a number of ways , still no success!!!!! | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-203264@lists.php.net to get a copy of this message | ||
>> Hi all,
>> I am still solving my upload script problems.
>> Here is the error Msg:
>> "Warning: copy(/var/www/html/upload_files/Default.bk1)
>> [function.copy]: failed to open stream: Permission denied in
>> /var/www/html/simple_upload.php on line 77"
>>
>> My Upload Code:
>> $result = move_uploaded_file($temp_name, $file_path);
>>
>> I started to think this is not only PHP , may be Apache problem too.
>> Anyone has some ideas?
>>
>> I have tried to set my upload directory into 777. Even I tried to use
>> sudo , giving apache as root permission and running system command
>> copy the file from the tmp directory to upload_files.
>>
>> but still no success!! I have done some research on web, no one can
>> suggest a solution rather than chmod 777( I did that!)
Does the PHP user (aka the Apache user) have permission to *READ* from and
*WRITE* to the TMP directory?
You may be attacking the wrong side of the equation.
I believe PHP will complain the same way whether it can't read/write /tmp,
or it can't read/write to your destination directory.
PS
For God's sake change your permissions back to something reasonable, and
stop running Apache as root, *NOW*.
Actually, from a more practical stand-point, *change* your upload
destination to some place *outside* the web tree, so that when PHP dumps
stuff in there, possibly some stuff you don't *want* in there, possibly
because some user is playing games with your site, then you can write some
code to examine the content before doing anything with it -- Specifically
*before* it ends up living on your public web-server.
Example: Bad guy decides your server would be a nice place to upload not
a worksheet, but his latest cracked video game or highly-popular software
package or, ahem, "graphic images". Then *your* server becomes a free
source of illegal content, or content you are not in the business of
hosting. That's bad. Real bad.
--
Like Music?
http://l-i-e.com/artists.htm