Re[2]: [PHP] help with upload in windows
| From: | David Tod Sigafoos | Date: | Mon, 18 Dec 2000 06:05:07 +0000 |
| Subject: | Re[2]: [PHP] help with upload in windows | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-30833@lists.php.net to get a copy of this message | ||
>> why this would happen. There isn't a rights problem as I am doing
>> this on my laptop for testing.
RL> Being on your laptop does not give you any particular special dispensation
RL> from security rules: Apache runs as a particular user, and that's the user
RL> PHP behaves as. Either that PHP user can write to the directory or it
RL> can't.
RL> Try right-clicking on the upload and destination folders and making them
RL> writable by anybody.
The 2 directories have share full set. I dont know what other rights i
can give them. The following message *seems* to indicate it was trying
to create userfiles ... is this possible?
Warning: Unable to create 'c:\program files\apache group\apache\htdocs\phpbb\userfiles\':
Permission denied in c:/program files/apache
group/apache/htdocs/test1.php on line 7
Line 7 is the copy() line
Sorry to seem like such a dunder head. This one has me stumped.
>> php 4.0.3pl1, apache 1.3.14 win98 on laptop .. same system on my
>> win2k. Using php as module (not windows installer/cgi)
>>
>> html form ... test1.html
>>
>> <html>
>> <body>
>> <FORM ENCTYPE="multipart/form-data" ACTION="test1.php"
>> METHOD=POST>
>> <INPUT TYPE="hidden" name="MAX_FILE_SIZE"
>> value="10000">
>> Send this file: <INPUT NAME="userfile" TYPE="file">
>> <INPUT TYPE="submit" VALUE="Send File">
>> </FORM>
>> </body>
>> </html>
>>
>> php script test1.php
>> <?php
>> $loaddir = 'c:\\program files\\apache
RL> group\\apache\\htdocs\\phpbb\\userfiles\\';
>>
>> echo(" ");
>>
>> if (is_uploaded_file($userfile)) {
>> copy($userfile, $loaddir);
>> } else {
>> echo ("Possible file upload attack: filename.");
>> }
>> ?>
>>
--
DSig
David Tod Sigafoos
mailto:dsig@teleport.com
Using 'The Bat' 1.48 Beta/11
`````
( O O )
_______oOOo__( )__oOOo_______