PHP - Warning: Copy() [function.copy]: Open_basedir Restriction In Effect

This was generated through phpFormGenerator, but I'm getting the following warning message when a file is not uploaded. I didn't set it as a required field.

"Warning: copy() [function.copy]: Filename cannot be empty ..."

If it possible to skip this check since it's not supposed to be required to upload a file? I'm simply trying to make a contact form that emails basic information with the added option of attaching a file/picture.

Code: [Select]
<?php
include("global.inc.php");
$errors=0;
$error="The following errors occured while processing your form input.<ul>";
pt_register('POST','FullName');
pt_register('POST','Email');
pt_register('POST','Phone');
pt_register('POST','QuestionsorComments');
$QuestionsorComments=preg_replace("/(\015\012)|(\015)|(\012)/","&nbsp;<br />", $QuestionsorComments);$AttachPictureforQuote=$HTTP_POST_FILES['AttachPictureforQuote'];
pt_register('POST','Howdidyoufindus');
if($FullName=="" || $Email=="" ){
$errors=1;
$error.="<li>You did not enter one or more of the required fields. Please go back and try again.";
}
if($HTTP_POST_FILES['AttachPictureforQuote']['tmp_name']==""){ }
 else if(!is_uploaded_file($HTTP_POST_FILES['AttachPictureforQuote']['tmp_name'])){
$error.="<li>The file, ".$HTTP_POST_FILES['AttachPictureforQuote']['name'].", was not uploaded!";
$errors=1;
}
if(!eregi("^[a-z0-9]+([_\\.-][a-z0-9]+)*" ."@"."([a-z0-9]+([\.-][a-z0-9]+)*)+"."\\.[a-z]{2,}"."$",$Email)){
$error.="<li>Invalid email address entered";
$errors=1;
}
if($errors==1) echo $error;
else{
$image_part = date("h_i_s")."_".$HTTP_POST_FILES['AttachPictureforQuote']['name'];
$image_list[4] = $image_part;
copy($HTTP_POST_FILES['AttachPictureforQuote']['tmp_name'], "files/".$image_part);
$where_form_is="http".($HTTP_SERVER_VARS["HTTPS"]=="on"?"s":"")."://".$SERVER_NAME.strrev(strstr(strrev($PHP_SELF),"/"));
$message="Full Name: ".$FullName."
Email: ".$Email."
Phone: ".$Phone."
Questions or Comments: ".$QuestionsorComments."
Attach Picture for Quote: ".$where_form_is."files/".$image_list[4]."
How did you find us: ".$Howdidyoufindus."
";
$message = stripslashes($message);
mail("webmaster@gmail.com","Form Submitted at your website",$message,"From: phpFormGenerator");
?>


<!-- This is the content of the Thank you page, be careful while changing it -->

<h2>Thank you!</h2>

<table width=50%>
<tr><td>Full Name: </td><td> <?php echo $FullName; ?> </td></tr>
<tr><td>Email: </td><td> <?php echo $Email; ?> </td></tr>
<tr><td>Phone: </td><td> <?php echo $Phone; ?> </td></tr>
<tr><td>Questions or Comments: </td><td> <?php echo $QuestionsorComments; ?> </td></tr>
<tr><td>Attach Picture for Quote: </td><td> <?php echo $AttachPictureforQuote; ?> </td></tr>
<tr><td>How did you find us: </td><td> <?php echo $Howdidyoufindus; ?> </td></tr>
</table>
<!-- Do not change anything below this line -->

<?php 
}
?>
Thanks for your time and any help you can provide!

Hi all

My code give this:

<b>Warning</b>:  file_exists(): open_basedir restriction in effect. File(/tmp) is not within the allowed path(s): (/home/clients/........

I get the tmp folder and check for its existanse and whether it is writeable

$t=sys_get_temp_dir();
writelog("t=$t");
if(file_exists($t)) writelog("t1=YES"); else writelog("t1=NO");
if(is_writable($t)) writelog("t2=YES"); else writelog("t2=NO");

Both gives no which is fine, I can process that. I do it to avoid the output above, but I still get that.

How should I check for allowed paths?

This runs on several systems where I cannot access php.ini or other system stuff.

 

Hi guys,

I am wirting a script to upload an image file, but I get the error:

copy() [function.copy]: Filename cannot be empty in

Obviouly it has something to do with the copy() function - (copy($HTTP_POST_FILES['product_img']['tmp_name'], $path))

I think it is not copying from my temp folder or something.

Can anyone help me out?

Code is:

Code: [Select]
//IMAGE FILE
$file_name = $_FILES['product_img']['name'];

echo '<p>File Name:' . $file_name . '</p>';
//IMAGE UPLOAD
// random 4 digit to add to file name
$random_digit=rand(0000,9999);

//combine random digit to file name to create new file name
//use dot (.) to combile these two variables
$new_image_name = $random_digit.$file_name;

echo $new_image_name;


//SET DESINATION FOLDER
$path= "uploads/".$new_image_name;
echo '<p>Path:' . $path . '</p>';
if($product_img !=none)
{
if(copy($HTTP_POST_FILES['product_img']['tmp_name'], $path))
{
echo "Successful<BR/>";
echo "File Name :".$new_file_name."<BR/>";
echo "File Size :".$HTTP_POST_FILES['product_img']['size']."<BR/>";
echo "File Type :".$HTTP_POST_FILES['product_img']['type']."<BR/>";
}
else
{
echo "Image upload Error<BR/>";
}
}
Any help would be greatly appreciated!

Thanks

I came across the PHP clone method. Does this clone first level fields and methods or does it also do deep copying e.g. copying references to those fields. For example, a field may be an array. Does it make a copy of the actual array or does it refer to the same array position in memory, so if the original changes, then the copy's changes as well?

Hello freaks,

I am currently creating a member system that will place a default handle image into a newly registered members file.
I have used the mkdir function create the directory successfully based on the members ID, but I can't get the copy function to work.

Code:
Code: [Select]
mkdir("memberFiles/$memberID", 0755);
$old = 'images/defaultlogo.jpg';
$new = 'memberFiles/$memberID/logo.jpg';
copy($old, $new);

Error Message:
Warning: copy(memberFiles/$memberID/logo.jpg) [function.copy]: failed to open stream: No such file or directory

Lastly, this folder is created to store members files.