Page 1 of 1

PhP to upload a filer to a server

Posted: Fri Mar 02, 2012 7:00 am
by Freebenzine
Hi,
I am working on a script to allow anonymous users to upload files. I started with this simple code, which sadly I cannot make to work:

<?php
$uploaddir = 'uploads/';
$uploadfile = $uploaddir . basename($_FILES['Upfile']['name']);

if (move_uploaded_file($_FILES['Upfile']['tmp_name'], $uploadfile)) {
echo "File is valid, and was successfully uploaded.\n";
} else {
echo "File uploading failed.\n";
}
?>

The corresponding form is:

<form name="upload" action="Upload.php" method="POST" ENCTYPE="multipart/formdata">
Select the file to upload: <input type="file" name=Upfile">
<input type="submit" name="upload" value="upload">
</form>

I have not yet included the security codes, still it does not work. The message I receive is: "File uploading failed". The server does allow anonymous uploads. Do I need to edit the .htaccess file? Any tips will be greatly appreciated.

Is there some better guide than http://www.scanit.be...file-upload.pdf on the security of file uploads?

Cheers

Re: PhP to upload a filer to a server

Posted: Fri Mar 02, 2012 7:07 am
by Celauran
The code works fine on my machine. Have you checked that apache has write permission to your uploads directory?

Re: PhP to upload a filer to a server

Posted: Mon Mar 05, 2012 7:03 am
by Freebenzine
HI,

Thanks for the reply. How can I check whether apache has write permission to my uploads directory?
Cheers

Re: PhP to upload a filer to a server

Posted: Mon Mar 05, 2012 7:10 am
by Celauran
Open up your FTP client and check the permissions on the directory. They'll most likely need to be 777 (drwxrwxrwx)

Re: PhP to upload a filer to a server

Posted: Tue Mar 06, 2012 1:58 pm
by Freebenzine
Thanks, it works now.
Is there some better guide than http://www.scanit.be...file-upload.pdf on the security of file uploads?
Cheers