Re: File upload directive: $_FILES['filename']['name'] instead of $_FILES['filename']['tmp_name']
| From: | Richard Quadling | Date: | Wed, 23 Dec 2009 16:52:27 +0000 |
| Subject: | Re: File upload directive: $_FILES['filename']['name'] instead of $_FILES['filename']['tmp_name'] | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-300652@lists.php.net to get a copy of this message | ||
2009/12/23 Andrei Iarus <poni1111@yahoo.com>:
> Of course: also tried the is_uploaded_file, exactly like in the manual. And
> it fails.... :(
>
> --- On Wed, 12/23/09, Richard Quadling <rquadling@googlemail.com> wrote:
>
> From: Richard Quadling <rquadling@googlemail.com>
> Subject: Re: [PHP] File upload directive: $_FILES['filename']['name']
> instead of $_FILES['filename']['tmp_name']
> To: "Andrei Iarus" <poni1111@yahoo.com>
> Cc: php-general@lists.php.net
> Date: Wednesday, December 23, 2009, 6:10 PM
>
> 2009/12/22 Andrei Iarus <poni1111@yahoo.com>:
>> Hello,
>>
>> On my production & testing servers (production runs on a centrino and
>> testing runs on Windows) I can only access the temporary uploaded file using
>> ini_get( 'upload_tmp_dir' . '/' .
>> $_FILES['filename']['name'];
>> while the file $_FILES['filename']['tmp_name'] simply does not exist
>> (checked with file_exists() function, and also looking in the temporary
>> folder).
>>
>> Is there a problem with my PHP installations? Is there any directive to
>> change this bihaviour?
>>
>> On production: PHP 5.2.10 and on testing: PHP 5.2.8 and 5.3.0
>>
>> Thanks in advance.
>>
>>
>>
>
> 2 functions to get to grips with:
>
> 1 - is_uploaded_file()
> 2 - move_uploaded_file()
>
> Example from http://php.net/is_uploaded_file
>
> <?php
>
> if (is_uploaded_file($_FILES['userfile']['tmp_name'])) {
> echo "File ". $_FILES['userfile']['name'] ." uploaded
> successfully.\n";
> echo "Displaying contents\n";
> readfile($_FILES['userfile']['tmp_name']);
> } else {
> echo "Possible file upload attack: ";
> echo "filename '". $_FILES['userfile']['tmp_name'] .
> "'..";
> }
>
> ?>
>
>
> --
> -----
> Richard Quadling
> "Standing on the shoulders of some very clever giants!"
> EE : http://www.experts-exchange.com/M_248814.html
> Zend Certified Engineer :
> http://zend.com/zce.php?c=ZEND002498&r=213474731
> ZOPA : http://uk.zopa.com/member/RQuadling
>
>
What version of Windows?
Can you provide a really basic test?
And a var_dump($_FILES) please?
--
-----
Richard Quadling
"Standing on the shoulders of some very clever giants!"
EE : http://www.experts-exchange.com/M_248814.html
Zend Certified Engineer : http://zend.com/zce.php?c=ZEND002498&r=213474731
ZOPA : http://uk.zopa.com/member/RQuadling