Forum does not allow members to upload files

billb · September 4, 2007

Hi to all

I have a forum with severe problem. will not allow any member to upload any type of files.

I am unfamiliar with PHP when I contacted the web host they said it is a program issue not the server.

Is it possible for someone to write the entire code to do the trick?

I was told it is very risky for the entire forum just to copy a simple code for upload.php file....I am not sure what information you need but any help is greatly appreciated.

Thanks to you all......

darkfreaks · September 4, 2007

code please?

teng84 · September 4, 2007

http://w3schools.com/php/php_file_upload.asp :-\read

billb · September 4, 2007

This is what is coded in the upload.php file.....The funny looking letters are only foreign language translation...Is this what you mean by the code? Thanks for your fast reply.

</head></html>

<tr>

<body>

<tr>

</tr>

<tr>

</map>

</tr>

</table>

</center>

</html>

</div>

<?PHP

include "config.php";

$exten="";

$number_of_exten = count ($allowed_extensions);

$number_of_uploads = count ($path);

switch ( $ta7meel )

{

default:

echo "<body topmargin=\"10\" leftmargin=\"0\" bgcolor=\"#254652\" link=\"#818EA0\" vlink=\"#5C697A\" alink=\"#818EA0\" text=\"#254652\" style=\"font-family: Verdana; font-size: 8pt; color: #254652\">

ÇáãáÝÇÊ ÇáãÓãæÍ ÈåÇ "; // ÇäÊåíäÇ ãä ØÈÇÚÉ ÇáÅØÇÑ ÇáÎÇÑÌí ááÌÏæá ¡ æ ÇáåíÏÑ

if (($limited_ext != "äÚã") or ($allowed_extensions == ""))

echo "Ãí ÇãÊÏÇÏ";

else

for($i=0; $i<$number_of_exten; $i++)

echo " $allowed_extensions[$i]";

if (($size_limited != "äÚã") or ($limited_size == "") )

$limited_size = "Ãí ÍÌã";

else

$limited_size .= " ÈÇíÊ"; //limited_size åÐí ÚÑÝäÇåÇ Ýí ãáÝ ÇáßæäÝíÞ ¡ äÖíÝ áå ÝÞØ ßáãÉ ÈÇíÊ

echo"</li>

ÃÞÕì ÍÌã ãÓãæÍ Èå: $limited_size</li>

ÇÓã ÇáãáÝ íÌÈ ÃáÇ íÍÊæí Úáì ãÓÇÝÇÊ Ãæ ÑãæÒ</li>

</li>

íÌÈ ßÊÇÈÉ ÇÓã ÇáãáÝ ÈÃÍÑÝ ÅäÌáíÒíå ÝÞØ</li>

</li>

ÅÓã ÇáãÓÊÎÏã æßáãÉ ÇáãÑæÑ ÊÕáßã ÚÈÑ ÇáÑÓÇÆá ÇáÎÇÕÉ ÈÇáãäÊÏì </li>

ÞÇá Çááå ÓÈÍÇä æÊÚÇáì : (æãÇ íáÝÙ ãä ÞæáÇ ÇáÇ áÏíå ÑÞíÈ ÚÊíÏ ) ÝÅÊÞí Çááå íÇ ÇÎí æÇÍÓä ÇÓÊÎÏÇã åÐ Ç ÇáÈÑäÇãÌ </li>

</li>

</ul>

<form method=\"POST\" action=\"$PHP_SELF?ta7meel=uploading\" enctype=\"multipart/form-data\">";

if ($protect_uploader=="äÚã")

echo"

ÇÓã ÇáãÓÊÎÏã: <input type=\"text\" name=\"username1\" size=\"20\">

ßáãÉ ÇáãÑæÑ:

";

echo"

ÊÍãíá</button></form></td></tr>

</tr></table></center></div></center></div></body></html>";

break;

//============================================================================================================

case "uploading":

$result = " Êã ÊÍãíá ÇáãáÝ ÈäÌÇÍ !! ";

if (($protect_uploader=="äÚã") && ($password!=$password1 || $username!=$username1))

$result = " ÊÃßÏ ãä ÕÍÉ ßáãÉ ÇáãÑæÑ æ ÇÓã ÇáãÓÊÎÏã !! ";

elseif ($file_name == "")

$result = " áã ÊÞã ÈÇÎÊíÇÑ Ãí ãáÝ ! ";

elseif(file_exists("$path/$file_name"))

$result = " ÇáãáÝ ãæÌæÏ ãÓÈÞÇ ";

elseif (($size_limited == "äÚã") && ($file_size > $limited_size))

$result = " ÍÌã ÇáãáÝ ÃßÈÑ ãä ÇáãÓãæÍ Èå ¡ ÃÞÕì ÍÌã ãÓãæÍ Èå åæ $limited_size ÈÇíÊ ";

else{ // ÈÏÇíÉ else

$exten = strrchr($file_name,'.');

if (($limited_ext == "äÚã") && (!in_array( $exten , $allowed_extensions )) && ($exten!=""))

$result = " ÚÐÑÇ -- áÇ íÓãÍ ÈÑÝÚ ÇáãáÝÇÊ ÐÇÊ ÇáÇãÊÏÇÏ $exten ";

else {

for ($i=0;$i<$number_of_uploads;$i++)

(@copy($file, "$path[$i]/$file_name") and $uploading_result[$i]="Êã

ÊÍãíá ÇáãáÝ ÈäÌÇÍ") or $uploading_result[$i]="ÍÏË ÎØÃ Ýí äÓÎ ÇáãÌáÏ $path[$i]";

}

} // else

echo "<html><head><title></title></head> <body topmargin=\"10\"leftmargin=\"0\" bgcolor=#51747E link=\"#818EA0\" vlink=\"#5C697A\"alink=\"#818EA0\" text=\"#000000\">

ÏÈí</td></tr><tr><td bgcolor=\"#EDF9FC\"><center>";

if ($result==" !! "){

if (empty($uploading_result))

echo $result;

else

for ($i=0;$i<=$number_of_uploads;$i++)

echo ("$uploading_result[$i] ");}

else echo $result;

" ";

if ($result==" Êã ÊÍãíá ÇáãáÝ ÈäÌÇÍ !! ") {

if (($exten=='.jpg' || $exten=='.gif' || $exten=='.bmp' || $exten=='.png' || $exten=='.jpe'))

echo : <img src=$path[0]/$file_name> ";

echo ("http://xxxxxxxxx/upload/dant/$file_name</font");}

echo"</center></td></tr>

www.xxxxxxxxxxxx</td></tr></table></center></div></body></html>

";

/*echo "";

$dir=dir($DOCUMENT_ROOT.dirname($PHP_SELF));

while ($dir_entry=$dir->read())

{

echo $dir->path ."/" . $dir_entry;

echo" ";

}

echo"";*/

break;

}// switch

?>

billb · September 4, 2007

http://w3schools.com/php/php_file_upload.asp :-\read

This is very useful and for sure in the right direction....Can you tell me if implemented in the exact manner will it be secured ? ie can members upload some bad files affecting the database etc?

Thank you for the help....This is a great forum indeed.

Sorry it is PHP 4.4.7

Sign In

Forum does not allow members to upload files

Recommended Posts

billb

Link to comment

Share on other sites

darkfreaks

Link to comment

Share on other sites

teng84

Link to comment

Share on other sites

billb

Link to comment

Share on other sites

billb

Link to comment

Share on other sites

Join the conversation

Browse

Activity

Important Information