Help with uploads

[nizuya]

I'm installing wordpress on my website to manage news content. I will not be the only one updating the content, there will also be other, non-programmer, users. As such I need the admin side web-based media uploading to work properly.

 

The website is hosted on a University virtual server and I am not able to change any setting like in php.ini

 

Part of the website is located in a private https protected folder and part is public.

 

Uploads should be saved in public portion of the website. Permissions on the "uploads" directory of the website are set to 777.

 

I have little experience working with web based uploading. I wrote a simple upload script just to try and troubleshoot the issues:

 

if ($_FILES["file"]["error"] > 0) {
echo "Error: " . $_FILES["file"]["error"] . "<br />";
}
else {
echo "Upload: " . $_FILES["file"]["name"] . "<br />";
echo "Type: " . $_FILES["file"]["type"] . "<br />";
echo "Size: " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
echo "Temp location: " . $_FILES["file"]["tmp_name"] . "<br />";

if (file_exists("uploads/" . $_FILES["file"]["name"])) {
	echo $_FILES["file"]["name"] . " already exists. ";
}
else {
	$result = move_uploaded_file($_FILES["file"]["tmp_name"], "uploads/" . $_FILES["file"]["name"]);
	if (!$result) {
		echo "Failed";
	}
	else {
		echo "Saved in: " . "uploads/" . $_FILES["file"]["name"];
	}
}
}

 

The output seems to be successful as the page displays "Saved in: uploads/filename.xyz". However, the file does NOT get copied to the uploads dir.

 

Any idea what could be going on?

 

Thanks,

David

[nizuya]

Bump.

 

Some of that if may be irrelevant. I just want to know if there is anything wrong with the above code.

 

To recap: move_uploaded_file() does NOT return false however the file is NOT moved.

 

Help me out!

[Pawn]

I can't see anything wrong with that code. In my (limited) experience, file upload issues are almost always permission problems.

[nizuya]

In that case, I know that the folder permissions are set to 777. Does anyone know of any php setting or permissions that would cause this?

[ignace]

You code is not 100% plus I see some vulnerabilities read http://www.scanit.be/uploads/php-file-upload.pdf to avoid future problems

[nizuya]

I'm just trying to use the code to troubleshoot. I'm not really worried about vulnerabilities since it's not live.

[nizuya]

bump... ?

[nizuya]

Final bump...