Re: File upload directive: $_FILES['filename']['name'] instead of $_FILES['filename']['tmp_name']

From: Date: Wed, 23 Dec 2009 16:52:27 +0000
Subject: Re: File upload directive: $_FILES['filename']['name'] instead of $_FILES['filename']['tmp_name']
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-300652@lists.php.net to get a copy of this message
2009/12/23 Andrei Iarus <poni1111@yahoo.com>: > Of course: also tried the is_uploaded_file, exactly like in the manual. And > it fails.... :( > > --- On Wed, 12/23/09, Richard Quadling <rquadling@googlemail.com> wrote: > > From: Richard Quadling <rquadling@googlemail.com> > Subject: Re: [PHP] File upload directive: $_FILES['filename']['name'] > instead of $_FILES['filename']['tmp_name'] > To: "Andrei Iarus" <poni1111@yahoo.com> > Cc: php-general@lists.php.net > Date: Wednesday, December 23, 2009, 6:10 PM > > 2009/12/22 Andrei Iarus <poni1111@yahoo.com>: >> Hello, >> >> On my production & testing servers (production runs on a centrino and >> testing runs on Windows) I can only access the temporary uploaded file using >> ini_get( 'upload_tmp_dir' . '/' . >> $_FILES['filename']['name']; >> while the file $_FILES['filename']['tmp_name'] simply does not exist >> (checked with file_exists() function, and also looking in the temporary >> folder). >> >> Is there a problem with my PHP installations? Is there any directive to >> change this bihaviour? >> >> On production: PHP 5.2.10 and on testing: PHP 5.2.8 and 5.3.0 >> >> Thanks in advance. >> >> >> > > 2 functions to get to grips with: > > 1 - is_uploaded_file() > 2 - move_uploaded_file() > > Example from http://php.net/is_uploaded_file > > <?php > > if (is_uploaded_file($_FILES['userfile']['tmp_name'])) { >    echo "File ". $_FILES['userfile']['name'] ." uploaded > successfully.\n"; >    echo "Displaying contents\n"; >    readfile($_FILES['userfile']['tmp_name']); > } else { >    echo "Possible file upload attack: "; >    echo "filename '". $_FILES['userfile']['tmp_name'] . > "'.."; > } > > ?> > > > -- > ----- > Richard Quadling > "Standing on the shoulders of some very clever giants!" > EE : http://www.experts-exchange.com/M_248814.html > Zend Certified Engineer : > http://zend.com/zce.php?c=ZEND002498&r=213474731 > ZOPA : http://uk.zopa.com/member/RQuadling > > What version of Windows? Can you provide a really basic test? And a var_dump($_FILES) please? -- ----- Richard Quadling "Standing on the shoulders of some very clever giants!" EE : http://www.experts-exchange.com/M_248814.html Zend Certified Engineer : http://zend.com/zce.php?c=ZEND002498&r=213474731 ZOPA : http://uk.zopa.com/member/RQuadling

« previous php.general (#300652) next »