RE: [PHP] Uploading Files Via PHP

2003-03-27 Thread Jennifer Goodie
Or you could just do it correctly the first time and be done with it. :)

-Original Message-
From: Philip J. Newman [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 27, 2003 10:23 AM
To: Jennifer Goodie; Dan Rossi; [EMAIL PROTECTED]
Subject: Re: [PHP] Uploading Files Via PHP


You could chnage the permissions when you want to write something then
change it back when your done.  Thats what i do.

/ Phil

- Original Message -
From: "Jennifer Goodie" <[EMAIL PROTECTED]>
To: "Dan Rossi" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Friday, March 28, 2003 6:17 AM
Subject: RE: [PHP] Uploading Files Via PHP


> A world writeable directory is a security risk.  Why not just fix the
> owner/group and only give the permissions needed, 775 at most.
>
> -Original Message-
> From: Dan Rossi [mailto:[EMAIL PROTECTED]
> Sent: Thursday, March 27, 2003 1:45 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [PHP] Uploading Files Via PHP
>
>
> did u even read it ? chmod 777 + owned by httpd
>
> -Original Message-
> From: Jason Wong [mailto:[EMAIL PROTECTED]
> Sent: Thursday, March 27, 2003 9:40 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [PHP] Uploading Files Via PHP
>
>
> On Thursday 27 March 2003 18:25, Marek Kilimajer wrote:
> > not necesserily both, either of them is enought:
>
> Not quite true :)
>
> If owned by 'httpd' then 'httpd' still needs write permission (o+w).
>
> > drwxrwxrwt2 root root   188416 Mar 27 11:23 /tmp
> > or
> > drwx--2 apache apache   188416 Mar 27 11:23
> > /var/www/uploads
> >
> > daniel wrote:
> > >possibly a permissions problem , dir needs to be 777 and owned by httpd
>
> --
> Jason Wong -> Gremlins Associates -> www.gremlins.biz
> Open Source Software Systems Integrators
> * Web Design & Hosting * Internet & Intranet Applications Development *
> --
> Search the list archives before you post
> http://marc.theaimsgroup.com/?l=php-general
> --
> /*
> In good speaking, should not the mind of the speaker know the truth of
> the matter about which he is to speak?
> -- Plato
> */
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Uploading Files Via PHP

2003-03-27 Thread Philip J. Newman
You could chnage the permissions when you want to write something then
change it back when your done.  Thats what i do.

/ Phil

- Original Message -
From: "Jennifer Goodie" <[EMAIL PROTECTED]>
To: "Dan Rossi" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Friday, March 28, 2003 6:17 AM
Subject: RE: [PHP] Uploading Files Via PHP


> A world writeable directory is a security risk.  Why not just fix the
> owner/group and only give the permissions needed, 775 at most.
>
> -Original Message-
> From: Dan Rossi [mailto:[EMAIL PROTECTED]
> Sent: Thursday, March 27, 2003 1:45 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [PHP] Uploading Files Via PHP
>
>
> did u even read it ? chmod 777 + owned by httpd
>
> -Original Message-
> From: Jason Wong [mailto:[EMAIL PROTECTED]
> Sent: Thursday, March 27, 2003 9:40 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [PHP] Uploading Files Via PHP
>
>
> On Thursday 27 March 2003 18:25, Marek Kilimajer wrote:
> > not necesserily both, either of them is enought:
>
> Not quite true :)
>
> If owned by 'httpd' then 'httpd' still needs write permission (o+w).
>
> > drwxrwxrwt2 root root   188416 Mar 27 11:23 /tmp
> > or
> > drwx--2 apache apache   188416 Mar 27 11:23
> > /var/www/uploads
> >
> > daniel wrote:
> > >possibly a permissions problem , dir needs to be 777 and owned by httpd
>
> --
> Jason Wong -> Gremlins Associates -> www.gremlins.biz
> Open Source Software Systems Integrators
> * Web Design & Hosting * Internet & Intranet Applications Development *
> --
> Search the list archives before you post
> http://marc.theaimsgroup.com/?l=php-general
> --
> /*
> In good speaking, should not the mind of the speaker know the truth of
> the matter about which he is to speak?
> -- Plato
> */
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



RE: [PHP] Uploading Files Via PHP

2003-03-27 Thread Jennifer Goodie
A world writeable directory is a security risk.  Why not just fix the
owner/group and only give the permissions needed, 775 at most.

-Original Message-
From: Dan Rossi [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 27, 2003 1:45 AM
To: [EMAIL PROTECTED]
Subject: RE: [PHP] Uploading Files Via PHP


did u even read it ? chmod 777 + owned by httpd

-Original Message-
From: Jason Wong [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 27, 2003 9:40 PM
To: [EMAIL PROTECTED]
Subject: Re: [PHP] Uploading Files Via PHP


On Thursday 27 March 2003 18:25, Marek Kilimajer wrote:
> not necesserily both, either of them is enought:

Not quite true :)

If owned by 'httpd' then 'httpd' still needs write permission (o+w).

> drwxrwxrwt2 root root   188416 Mar 27 11:23 /tmp
> or
> drwx--2 apache apache   188416 Mar 27 11:23
> /var/www/uploads
>
> daniel wrote:
> >possibly a permissions problem , dir needs to be 777 and owned by httpd

--
Jason Wong -> Gremlins Associates -> www.gremlins.biz
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *
--
Search the list archives before you post
http://marc.theaimsgroup.com/?l=php-general
--
/*
In good speaking, should not the mind of the speaker know the truth of
the matter about which he is to speak?
-- Plato
*/


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Uploading Files Via PHP

2003-03-27 Thread Marek Kilimajer
By apache I ment the httpd process's user. I don't mean your way won't 
work, but you give away unnecessary permissions - if the directory is 
owned by httpd, access rights 700 are enough, if the directory is not 
owned by httpd, you need at least 007

Dan Rossi wrote:

did u even read it ? chmod 777 + owned by httpd

-Original Message-
From: Jason Wong [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 27, 2003 9:40 PM
To: [EMAIL PROTECTED]
Subject: Re: [PHP] Uploading Files Via PHP
On Thursday 27 March 2003 18:25, Marek Kilimajer wrote:
 

not necesserily both, either of them is enought:
   

Not quite true :)

If owned by 'httpd' then 'httpd' still needs write permission (o+w).

 

drwxrwxrwt2 root root   188416 Mar 27 11:23 /tmp
or
drwx--2 apache apache   188416 Mar 27 11:23
/var/www/uploads
daniel wrote:
   

possibly a permissions problem , dir needs to be 777 and owned by httpd
 

 



--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


RE: [PHP] Uploading Files Via PHP

2003-03-27 Thread Dan Rossi
did u even read it ? chmod 777 + owned by httpd

-Original Message-
From: Jason Wong [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 27, 2003 9:40 PM
To: [EMAIL PROTECTED]
Subject: Re: [PHP] Uploading Files Via PHP


On Thursday 27 March 2003 18:25, Marek Kilimajer wrote:
> not necesserily both, either of them is enought:

Not quite true :)

If owned by 'httpd' then 'httpd' still needs write permission (o+w).

> drwxrwxrwt2 root root   188416 Mar 27 11:23 /tmp
> or
> drwx--2 apache apache   188416 Mar 27 11:23
> /var/www/uploads
>
> daniel wrote:
> >possibly a permissions problem , dir needs to be 777 and owned by httpd

-- 
Jason Wong -> Gremlins Associates -> www.gremlins.biz
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *
--
Search the list archives before you post
http://marc.theaimsgroup.com/?l=php-general
--
/*
In good speaking, should not the mind of the speaker know the truth of
the matter about which he is to speak?
-- Plato
*/


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Uploading Files Via PHP

2003-03-27 Thread Jason Wong
On Thursday 27 March 2003 18:25, Marek Kilimajer wrote:
> not necesserily both, either of them is enought:

Not quite true :)

If owned by 'httpd' then 'httpd' still needs write permission (o+w).

> drwxrwxrwt2 root root   188416 Mar 27 11:23 /tmp
> or
> drwx--2 apache apache   188416 Mar 27 11:23
> /var/www/uploads
>
> daniel wrote:
> >possibly a permissions problem , dir needs to be 777 and owned by httpd

-- 
Jason Wong -> Gremlins Associates -> www.gremlins.biz
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *
--
Search the list archives before you post
http://marc.theaimsgroup.com/?l=php-general
--
/*
In good speaking, should not the mind of the speaker know the truth of
the matter about which he is to speak?
-- Plato
*/


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Uploading Files Via PHP

2003-03-27 Thread Marek Kilimajer
not necesserily both, either of them is enought:
drwxrwxrwt2 root root   188416 Mar 27 11:23 /tmp
or
drwx--2 apache apache   188416 Mar 27 11:23 /var/www/uploads
daniel wrote:

possibly a permissions problem , dir needs to be 777 and owned by httpd
 

 



--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


RE: [PHP] Uploading Files Via PHP

2003-03-26 Thread daniel
possibly a permissions problem , dir needs to be 777 and owned by httpd
>= Original Message From "Jennifer Goodie" <[EMAIL PROTECTED]> 
=
>http://www.php.net/manual/en/features.file-upload.php
>
>From the page listed above: "Related Configurations Note: See also the
>file_uploads, upload_max_filesize, upload_tmp_dir, and post_max_size
>directives in php.ini"
>
>I would read that manual page as it deals with file uploading support.
>
>-Original Message-
>From: Vernon [mailto:[EMAIL PROTECTED]
>Sent: Wednesday, March 26, 2003 4:41 PM
>To: [EMAIL PROTECTED]
>Subject: [PHP] Uploading Files Via PHP
>
>
>Is there some thing that needs to be turned on in the php.ini in order to be
>able to upload photos VIA php? I have the same script on one machine with
>the right permissions on the upload dirs on one machine and am moving to
>another machine which is not being uploaded. Funny thing is I'm not getting
>any errors in the Apache logs.
>
>Thanks
>
>
>
>--
>PHP General Mailing List (http://www.php.net/)
>To unsubscribe, visit: http://www.php.net/unsub.php



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



RE: [PHP] Uploading Files Via PHP

2003-03-26 Thread Jennifer Goodie
http://www.php.net/manual/en/features.file-upload.php

>From the page listed above: "Related Configurations Note: See also the
file_uploads, upload_max_filesize, upload_tmp_dir, and post_max_size
directives in php.ini"

I would read that manual page as it deals with file uploading support.

-Original Message-
From: Vernon [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 26, 2003 4:41 PM
To: [EMAIL PROTECTED]
Subject: [PHP] Uploading Files Via PHP


Is there some thing that needs to be turned on in the php.ini in order to be
able to upload photos VIA php? I have the same script on one machine with
the right permissions on the upload dirs on one machine and am moving to
another machine which is not being uploaded. Funny thing is I'm not getting
any errors in the Apache logs.

Thanks



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Uploading Files Via PHP

2003-03-26 Thread Evan Nemerson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Are you getting any errors through PHP? Set error reporting to E_ALL then try.






On Wednesday 26 March 2003 04:41 pm, Vernon wrote:
> Is there some thing that needs to be turned on in the php.ini in order to
> be able to upload photos VIA php? I have the same script on one machine
> with the right permissions on the upload dirs on one machine and am moving
> to another machine which is not being uploaded. Funny thing is I'm not
> getting any errors in the Apache logs.
>
> Thanks

- -- 
All religions are founded on the fear of the many and the cleverness of the 
few.

- -Stendhal
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE+glMF/rncFku1MdIRAlN5AJ9n6jN4N8dLQg8OVLZZClgSEJ+qEwCffq6f
XRmpe/CK1i1ecaHRh7t+eLQ=
=snmO
-END PGP SIGNATURE-


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[PHP] Uploading Files Via PHP

2003-03-26 Thread Vernon
Is there some thing that needs to be turned on in the php.ini in order to be
able to upload photos VIA php? I have the same script on one machine with
the right permissions on the upload dirs on one machine and am moving to
another machine which is not being uploaded. Funny thing is I'm not getting
any errors in the Apache logs.

Thanks



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Uploading Files via PHP

2001-02-18 Thread Michael Stearne

Hmm.  I don't know one thing you could try is putting $image in quotes, 
like '$image'.  Also you might try to use the code I have pasted below.  
Using exec is probably not the most effecient way to do the copy of the 
file (and using mv limits you to *nix).  Make sure you remove the checks 
for image type files that I make in the checkImgType() function.

HTH,
Michael


if($Image!="none"){
   $ImageExt=checkImgType($Image_type,$Image_name);
}

if($Image!="none"){
$ImageFinal=$ABS_PRODUCTS_IMAGES_DIR.$LastInsertID."Image".$ImageExt;
copy($Image, $ImageFinal);
}


function checkImgType($image_type,$image_name){
if((strcmp($image_type,"image/jpeg")==0)||(strcmp($image_type,"image/gif")==0)||(strcmp($image_type,"image/pjpeg")==0)||(strcmp($image_type,"image/jpg")==0))
{
   switch($image_type){
   case "image/jpg":
   $imageExt=".jpg";
   break;
   case "image/jpeg":
   $imageExt=".jpg";
   break;
   case "image/pjpeg":
   $imageExt=".jpg";
   break;
   case "image/gif":
   $imageExt=".gif";
   break;
   }
   return $imageExt;
}else
{
print "$image_name is not a valid file to upload.
Please upload JPEG (.jpg) or GIF (.gif) type images 
only. ";
return 0;
}
}



Brian Drexler wrote:

>  exec( "mv $image '$Destination/$FileName'");
> ?>
> 
> ----- Original Message -----
> From: Michael Stearne <[EMAIL PROTECTED]>
> To: Brian Drexler <[EMAIL PROTECTED]>
> Cc: Php-General <[EMAIL PROTECTED]>
> Sent: Sunday, February 18, 2001 1:55 PM
> Subject: Re: [PHP] Uploading Files via PHP
> 
> 
>> The script you are using is probably checking the MIME type of the file
>> uploaded and rejecting any of the ones that are not one of the types you
>> listed.  Look at or post some of the code you are using to find out if
>> this is the case.
>> 
>> Michael
>> 
>> 
>> Brian Drexler wrote:
>> 
>>> I've been using a PHP upload script to upload files to our server, but
>> 
> my
> 
>>> problem is this.  I can't upload anything but JPG, GIF, and HTML files.
>>> Anyone have any idea why?  This is probably something simple that I'm
>> 
> just
> 
>>> overlooking, but please help.
>>> 
>>> Brian Drexler
>>> 
>>> 
>> 
>> 
>> --
>> PHP General Mailing List (http://www.php.net/)
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>> To contact the list administrators, e-mail: [EMAIL PROTECTED]
> 



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




Re: [PHP] Uploading Files via PHP

2001-02-18 Thread Brian Drexler



- Original Message -
From: Michael Stearne <[EMAIL PROTECTED]>
To: Brian Drexler <[EMAIL PROTECTED]>
Cc: Php-General <[EMAIL PROTECTED]>
Sent: Sunday, February 18, 2001 1:55 PM
Subject: Re: [PHP] Uploading Files via PHP


> The script you are using is probably checking the MIME type of the file
> uploaded and rejecting any of the ones that are not one of the types you
> listed.  Look at or post some of the code you are using to find out if
> this is the case.
>
> Michael
>
>
> Brian Drexler wrote:
>
> > I've been using a PHP upload script to upload files to our server, but
my
> > problem is this.  I can't upload anything but JPG, GIF, and HTML files.
> > Anyone have any idea why?  This is probably something simple that I'm
just
> > overlooking, but please help.
> >
> > Brian Drexler
> >
> >
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




Re: [PHP] Uploading Files via PHP

2001-02-18 Thread Michael Stearne

The script you are using is probably checking the MIME type of the file 
uploaded and rejecting any of the ones that are not one of the types you 
listed.  Look at or post some of the code you are using to find out if 
this is the case.

Michael


Brian Drexler wrote:

> I've been using a PHP upload script to upload files to our server, but my
> problem is this.  I can't upload anything but JPG, GIF, and HTML files.
> Anyone have any idea why?  This is probably something simple that I'm just
> overlooking, but please help.
> 
> Brian Drexler
> 
> 



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




[PHP] Uploading Files via PHP

2001-02-18 Thread Brian Drexler

I've been using a PHP upload script to upload files to our server, but my
problem is this.  I can't upload anything but JPG, GIF, and HTML files.
Anyone have any idea why?  This is probably something simple that I'm just
overlooking, but please help.

Brian Drexler


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]