[ djovan01 @ 18.01.2007. 13:46 ] @
| Pokusavajuci da uradim upload fajla na server preko formulara dobijam gresku koja kaze:
Warning: move_uploaded_file(/home/leecontr/public_html/test1/QuoteDesign/uploads/TestFile.txt) [function.move-uploaded-file]: failed to open stream: Permission denied in /home/leecontr/public_html/test1/QuoteDesign/upload.php on line 8
Warning: move_uploaded_file() [function.move-uploaded-file]: Unable to move '/tmp/phpvjYamf' to '/home/leecontr/public_html/test1/QuoteDesign/uploads/TestFile.txt' in /home/leecontr/public_html/test1/QuoteDesign/upload.php on line 8
Possible file upload attack!
Here is some more debugging info:Array
(
[userfile] => Array
(
[name] => TestFile.txt
[type] => text/plain
[tmp_name] => /tmp/phpvjYamf
[error] => 0
[size] => 52
)
)
Iz toga sto sam procitala izgleda da nemam odredjenu dozvoluda bi uradila upload. Kako da to promenim i ucinim da moja skripta radi.
Hvala
p.s evo i sta sam napisala od koda
<?php
$uploaddir = "/home/leecontr/public_html/test1/QuoteDesign/uploads/";
$uploadfile = $uploaddir . basename($_FILES['userfile']['name']);
echo '<pre>';
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
echo "File is valid, and was successfully uploaded.\n";
} else {
echo "Possible file upload attack!\n";
}
echo 'Here is some more debugging info:';
print_r($_FILES);
print "</pre>";
?>
|
[ centaur @ 18.01.2007. 15:41 ] @
Neznam kakav pristup imas tom serveru i cije je vlasnistvo tog direktorijuma,ali ovo bi trebalo da resi tvoje probleme:
ako imas shell pristup:
Code:
chmod a+w /home/leecontr/public_html/test1/QuoteDesign/uploads
ako imas neki panel ili ne znam ni ja sta dodaj tom direktorijumu dozvolu za pisanje.
[ djovan01 @ 18.01.2007. 15:57 ] @
pazi sad pristup imam preko cPanel-a . Otisla sam na File Management i u okviru tog fajla dozvolila upisivanje medjutim i dalje mi se javlja ista greska. Ne znam da nisam pogresila sto se tice putanje mada sam sigurna da nisam.
evo i php fajla
<?php
$uploaddir = "/home/leecontr/public_html/test1/QuoteDesign/uploads/";
$uploadfile = $uploaddir . basename($_FILES['userfile']['name']);
echo '<pre>';
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
echo "File is valid, and was successfully uploaded.\n";
} else {
echo "Possible file upload attack!\n";
}
echo 'Here is some more debugging info:';
print_r($_FILES);
print "</pre>";
?>
-------------------------------
a ovo mi je form
-------------------------------
<form enctype="multipart/form-data" action="danijelaupload.php" method="POST">
<input type="hidden" name="MAX_FILE_SIZE" value="30000" />
Send this file: <input name="userfile" type="file" />
<input type="submit" value="Send File" />
</form>
[ centaur @ 18.01.2007. 16:00 ] @
Sad gledam jednu moju klasu,ja sam koristio relativnu putanju i nisam imao nikakvih problema.
Kad kazem relativnu,mislim na putanju od root direktorijuma web servera.
[ djovan01 @ 18.01.2007. 16:10 ] @
Sta mislis da stvara problem onda ako mi je putanja ok?
[ centaur @ 18.01.2007. 16:26 ] @
Ovako gledano kod mi deluje OK,jedino sto bih ja koristio i sledecu funkciju za proveru
http://www.php.net/manual/en/function.is-uploaded-file.php
Jesi li probala da koristis putanju koju sam ti predlozio?
[ djovan01 @ 18.01.2007. 16:34 ] @
iskopirala sam kod sa php.net sajta sto si ostavio i uradio je upload i izbacio sadrzaj fajla(fajl je obican txt file sa bezveze tekstom. E sada mozes li da mi kazes koja je to putanju o kojoj si mi govorio.
evo i outouta:
File TestFile.txt uploaded successfully. Displaying contents asdadadkljaslkd kajsdhakd askjdhakd jkashdkahsdka
[ centaur @ 18.01.2007. 16:43 ] @
Izbaci sve ispred test1 direktorijuma.
[ djovan01 @ 18.01.2007. 16:47 ] @
izbacila sam ali sad mi je izbacilo gresku
ile TestFile.txt uploaded successfully to temp. Displaying contents asdadadkljaslkd kajsdhakd askjdhakd jkashdkahsdka
Warning: move_uploaded_file() [function.move-uploaded-file]: open_basedir restriction in effect. File(/test1/QuoteDesign/uploads/TestFile.txt) is not within the allowed path(s): (/home/leecontr/:/usr/lib/php:/usr/local/lib/php:/tmp) in /home/leecontr/public_html/test1/QuoteDesign/danijelaupload.php on line 13
Possible file upload attack! Here is some more debugging info:Array ( [userfile] => Array ( [name] => TestFile.txt [type] => text/plain [tmp_name] => /tmp/phpRzhSzT [error] => 0 [size] => 52 ) )
uzas opet restrikcije na direktorijum.
kada odem u cPanel i otvorim File management klikenem na ime dajla i dobijem opciju change premissions sve je stiklirano pritisnem ok da li znaci da sam omogucila opcije za read, write i execute za taj folder?
[ djovan01 @ 18.01.2007. 18:01 ] @
promenjeni su settings na serveru i sad sve radi kao sat :)
[ centaur @ 18.01.2007. 18:14 ] @
Bas sam sad bolje pogledao moju klasu.Slagao sam te za putanju.
Skracenu putanju sam koristio kako bih snimio to kao link ka fajlu u bazi,a za upload sam koristio apsolutnu putanju do fajla.
Ako radi,onda je sve OK,ali ja ipak da kazem.
Sorry
Copyright (C) 2001-2025 by www.elitesecurity.org. All rights reserved.