Hi,
thanks for the responses! Here is the code snippet:
The form:
FORM ENCTYPE=multipart/form-data ACTION=upload.php METHOD=POST
INPUT TYPE=hidden name=MAX_FILE_SIZE value=1000
Send this file: INPUT NAME=userfile TYPE=file
INPUT TYPE=submit VALUE=Send File
The PHP part:
if (is_uploaded_file($userfile)) {
copy($userfile, ./);
} else {
echo Possible file upload attack: filename '$userfile'.;
}
It always runs into the file attack line.
When I read out the $HTTP_POST_FILES I get
userfile=array
userfile_size=0
userfile_type=img/gif
It would be great if you can write back again.
Thanks, Matthias
Kevin Williams [EMAIL PROTECTED] wrote in message
003001c0dbdc$e8e6c5e0$[EMAIL PROTECTED]">news:003001c0dbdc$e8e6c5e0$[EMAIL PROTECTED]...
Hi,
A snippet of code could help, but I recently experienced two problems with
uploading and gaining the information.
Are you using the correct ENCTYPE for the upload, along with using POST (GET
doesn't work).
Also, if you are trying to us the information from inside a function, I had
to either globally define all of the attributes, or you could pass them to
the function.
Hope this helps
Kevin Williams
Matthias Roggendorf [EMAIL PROTECTED] wrote in message
9dmisb$bhq$[EMAIL PROTECTED]">news:9dmisb$bhq$[EMAIL PROTECTED]...
Hi,
sorry for asking such easy things but I really have a hard time to get
this
to work:
I use exactly the scripts which are given on the PHP website to upload
files. The problem is that the variable $userfile just contains none and
$userfile_size is 0. The rest of the variables have the right values.
When I use a larger file it takes more time so I assume that the file is
uploaded, but I cannot save it because I don't know the temporary
filename.
Can anybody help me? I really need this to work.
Thanks, Matthias
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]