Re: Upload is not working ( Permission Problem), I tried a number of ways , still no success!!!!!

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>> Hi all,
>>    I am still solving my upload script problems.
>> Here is the error Msg:
>> "Warning: copy(/var/www/html/upload_files/Default.bk1)
>> [function.copy]: failed to open stream: Permission denied in
>> /var/www/html/simple_upload.php on line 77"
>>
>> My Upload Code:
>> $result  =  move_uploaded_file($temp_name, $file_path);
>>
>> I started to think this is not only PHP , may be Apache problem too.
>> Anyone has some ideas?
>>
>> I have tried to set my  upload directory into 777. Even I tried to use
>> sudo , giving apache as root permission and running system command
>> copy the file from the tmp directory to upload_files.
>>
>> but still no success!! I have done some research on web, no one can
>> suggest a solution rather than chmod 777( I did that!)

Does the PHP user (aka the Apache user) have permission to *READ* from and
*WRITE* to the TMP directory?

You may be attacking the wrong side of the equation.

I believe PHP will complain the same way whether it can't read/write /tmp,
or it can't read/write to your destination directory.

PS

For God's sake change your permissions back to something reasonable, and
stop running Apache as root, *NOW*.

Actually, from a more practical stand-point, *change* your upload
destination to some place *outside* the web tree, so that when PHP dumps
stuff in there, possibly some stuff you don't *want* in there, possibly
because some user is playing games with your site, then you can write some
code to examine the content before doing anything with it -- Specifically
*before* it ends up living on your public web-server.

Example:  Bad guy decides your server would be a nice place to upload not
a worksheet, but his latest cracked video game or highly-popular software
package or, ahem, "graphic images".  Then *your* server becomes a free
source of illegal content, or content you are not in the business of
hosting.  That's bad.  Real bad.

-- 
Like Music?
http://l-i-e.com/artists.htm

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux