PHP - How To Fopen() Into A Specific Directory???

Hi,

I have my website located at /home/public_html. I have a folder used by my web managers at /home/public_html/dev. The web managers only have the permissions to access the contents of that dev directory and no other directory on the website. But, is there a way to disable certain dangerous functions like shell_exec() only in /home/public_html/dev ?

I know you can disable functions in php.ini, but the problem is that if I put the php.ini file in the /home/public_html/dev directory, it could easily be changed (on my shared host it's not possible to change owner/group permissions). Putting the php.ini file with the disabled functions list in /home/public_html works great in preventing the dev folder from using them since its in an inaccessible location to the web managers, but unfortunately that also prevents me from using the functions in public_html, where they are needed.

One possible solution I was thinking could involve writing an .htaccess conditional statement, but I'm not quite such how to accomplish that. Here is what I would need to do in my .htaccess file:
Code: [Select]
IF DIRECTORY == /home/public_html/dev {
   suPHP_ConfigPath /home/public_html/php.ini
   # Sets the location of the php.ini file to use.
   # I know suPHP_ConfigPath works perfectly, just need to know how to do the conditional
}
I would have the above .htaccess file as well as the php.ini file with the restrictions located in /home/public_html, but it would ideally only use that php.ini file with the restrictions within the dev folder.

Does anyone know how to accomplish the above conditional statement, or some other solution which would allow me to disable certain PHP functions for the dev directory without affecting the public_html directory or having the php.ini file directly in the dev directory?

Thanks!

hi,

I want to write pdf file but it is getting garbage value

i check following url

http://bugs.php.net/bug.php?id=21904&edit=1

Code: [Select]
$fp = fopen($fdirandname,'wb');
fwrite($fp,$pdfcode);
fclose($fp);

So I am tryting to create a script to upload a CSV file into a MySql DB. It has like 10K records into SQL   My Code is copy below ...   I get the following errors.   Line 16 is the $handle line 18 is the While Statement   Error: Warning: fopen(): Filename cannot be empty in C:\local\htdocs\ADPStorage\DemandCSV.php on line 16

Warning: fopen()expects parameter 1 to be resource, boolean given in C:\local\htdocs\ADPStorage\DemandCSV.php on line 18       I use my script for another table and it worked like a charm. Less data and less colums do.   Bad Code: (good Code sample below. this one)

<?php

$today = date("m.d.y.h.m.s");                       
echo $today;

$BPTD_fy = '2014';
$BPTD_updatedate = $today;

  $conn = mysql_connect("Localhost","root","password") or die (mysql_error());
  mysql_select_db("ds_storage",$conn);
  
	if(isset($_POST['submit']))
	{
		$file = $_FILES['file']['tmp_name'];
		  
		  $handle = fopen($file, "r");
		
		while(($fileop = fgetcsv($handle, 100000, ",")) !==FALSE)
		{
			$BPTD_fy = $fileop[0];
			$BPTD_Status = $fileop[1];
			$BPTD_Classification = $fileop[2];
			$BPTD_ProcureCat = $fileop[3];
			$BPTD_Product = $fileop[4];
			$BPTD_Project = $fileop[5];
			$BPTD_DSCategory = $fileop[6];
			$BPTD_Calculated = $fileop[7];
			$BPTD_CapacityType = $fileop[8];
			$BPTD_Amount = $fileop[9];
			$BPTD_Jul = $fileop[10];
			$BPTD_Aug = $fileop[11];
			$BPTD_Sep = $fileop[12];
			$BPTD_Oct = $fileop[13];
			$BPTD_Nov = $fileop[14];
			$BPTD_Dec = $fileop[15];
			$BPTD_Jan = $fileop[16];
			$BPTD_Feb = $fileop[17];
			$BPTD_Mar = $fileop[18];
			$BPTD_Apr = $fileop[19];
			$BPTD_May = $fileop[20];
			$BPTD_Jun = $fileop[21];
			$BPTD_Location = $fileop[22];
			$BPTD_Env = $fileop[23];
			$BPTD_Requester = $fileop[24];
			$BPTD_ServiceArea = $fileop[25];
			$BPTD_ServiceGroup = $fileop[26];
			$BPTD_DepHead = $fileop[27];
			$BPTD_Recgroup = $fileop[28];
			$BPTD_RecOwner = $fileop[29];
			$BPTD_Entrydate = $fileop[30];
			$BPTD_updatedate = $fileop[31];
			
			
			$sql = mysql_query("INSERT INTO inv_bpt_demand (Status, Classification, ProcureCat, Product, Project, DSCategory, Calculated, CapacityType, Amount, Jul, Aug, Sep, Oct, Nov, Dec, 
			Jan, Feb, Mar, Apr, May, Jun, Location, Env, Requester, ServiceArea, ServiceGroup, DepHead, Recgroup, RecOwner, Entrydate, updatedate) 
			
			VALUES ('$BPTD_Status', '$BPTD_Classification', '$BPTD_ProcureCat', '$BPTD_Product', '$BPTD_Project', '$BPTD_DSCategory', '$BPTD_Calculated', '$BPTD_CapacityType', '$BPTD_Amount',
			'$BPTD_Jul', '$BPTD_Aug', '$BPTD_Sep', '$BPTD_Oct', '$BPTD_Nov', '$BPTD_Dec', '$BPTD_Jan', '$BPTD_Feb', '$BPTD_Mar', '$BPTD_Apr','$BPTD_May', '$BPTD_Jun','$BPTD_Location',
			'$BPTD_Env','$BPTD_Requester', '$BPTD_ServiceArea', '$BPTD_ServiceGroup','$BPTD_DepHead', '$BPTD_Recgroup','$BPTD_RecOwner','$BPTD_Entrydate','$BPTD_updatedate')");
			
			if($sql)
			{
			echo 'Data Uploaded Successfully';
			
			}
		}
	}
  
?>

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>BPT Demand CSV</title>
  <link rel="stylesheet" type="text/css" href="file:///C|/local/htdocs/style/style.css" />
  <script type="text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js"></script>
</head>
<body>
  <div id="mainWrapper">

    <form method="post" action="https://localhost/Storage/DemandCSV.php" enctype="multipart/form-data">
        <input type="file" name="file" />
        <br />
        <input type="submit" name="submit" value="Submit" />
    </form>
    
  </div><!--end mainWrapper-->
</body>
</html>

Similar Working code (good)

<?php
  $conn = mysql_connect("Localhost","root","password") or die (mysql_error());
  mysql_select_db("ds_storage",$conn);
  
	if(isset($_POST['submit']))
	{
		$file = $_FILES['file']['tmp_name'];
		  
		  $handle = fopen($file, "r");
		
		while(($fileop = fgetcsv($handle,1000,",")) !==FALSE)
		{
			
			$PC_Num = $fileop[0];
			$PC_Name = $fileop[1];
			$PC_BPTNUM = $fileop[2];
			$PC_busclass = $fileop[3];
			$PC_Note = $fileop[4];
			$PC_Acro = $fileop[5];
			$PC_type = $fileop[6];
						
			///echo $fileop[1];
			$sql = mysql_query("INSERT INTO inv_names (PC_Num, PC_Name, PC_BPTNUM, PC_busclass, PC_Note, PC_Acro, PC_type) 
			VALUES ('$PC_Num', '$PC_Name', '$PC_BPTNUM', '$PC_busclass', '$PC_Note', '$PC_Acro', '$PC_type')");
			
			if($sql)
			{
			echo 'Data Uploaded Successfully';
			
			}
		}
	}
  
?>

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>Upload CSV</title>
  <link rel="stylesheet" type="text/css" href="file:///C|/local/htdocs/style/style.css" />
  <script type="text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js"></script>
</head>
<body>
  <div id="mainWrapper">

    <form method="post" action="https://localhost/Storage/Storage_CSV.php" enctype="multipart/form-data">
        <input type="file" name="file" />
        <br />
        <input type="submit" name="submit" value="Submit" />
    </form>
    
  </div><!--end mainWrapper-->
</body>
</html>

Please help and thx in advance   ~J

Hi guys,

I've been working on a script for a while now,
and I'm sure it doesn't look great and all, and it's probably really messed up..
But right now I've finally got it working!
There's only 1 thing I'd really like to add..
Searching through & listing of remote directories!
The directories I'm trying to list have directory listings enabled,
and I think it *should* be possible.
I just have no clue how.

Here's my current code in a beautiful mix of HTML and PHP:


<?
$border_size = "0";

function returner($what) {
$what=explode("/",$what);
$tps=count($what);
$what=$what[$tps-1];
return $what;
}

$page_url= "";
$home_url=returner(__FILE__);
if(isset($_GET['q'])) {
$qtext=$_GET['q'];
} else {
$qtext="";
}
function getdirsize($directory, $format=FALSE) {
$size = 0;
if(substr($directory,-1) == '/') {
$directory = substr($directory,0,-1);
}
if(!file_exists($directory) || !is_dir($directory) || !is_readable($directory)) {
return -1;
}
if($handle = opendir($directory)) {
while(($file = readdir($handle)) !== false) {
$path = $directory.'/'.$file;
if($file != '.' && $file != '..') {
if(is_file($path)) {
$size += filesize($path);
}
elseif(is_dir($path)) {
$handlesize = getdirsize($path);
if($handlesize >= 0) {
$size += $handlesize;
} else {
return -1;
}
}
}
}
closedir($handle);
}
if($format == TRUE) {
if($size / 1048576 > 1) {
return round($size / 1048576, 1).' MB';
}
elseif($size / 1024 > 1) {
return round($size / 1024, 1).' KB';
} else {
return round($size, 1).' bytes';
}
} else {
return $size;
}
}

if(isset($_GET['type'])){
  $type=$_GET['type'];
} else {
  $type="new";
}

$textures=0;
$models=0;
$avatars=0;
$seqs=0;
$sounds=0;

foreach (glob("textures/*.jpg") as $texture){
$textures++;
}
foreach (glob("models/*.zip") as $model){
$models++;
}
foreach (glob("avatars/*.zip") as $avatar){
$avatars++;
}
foreach (glob("seqs/*.zip") as $seq){
$seqs++;
}
foreach (glob("sounds/*.zip") as $sound){
$sounds++;
}
?>
<!DOCTYPE html>
<html>
<head>
<title>ObjectPath Search</title>
<style type="text/css">
#wrapper {
width: 850px;
margin: 30px auto 30px auto;
padding: 10px;
}

body 
{
color:#C6C6C6;
background:#1E1E1E;
/* margin:0; padding:0; */
overflow-x:hidden;
}

#tabs {
font: 85% "Trebuchet MS", sans-serif;
}

.left {
float: left;
}

.right {
float: right;
}

a:link, a:visited, a:active {
color: #3DB015;
text-decoration: none;
}

a:hover {
color: #00E0FF;
}

h2 {
color: #3DB015;
padding-bottom: 0.2em;
font-size: 110%;
}
ul#icon {margin: 0; padding: 0;}
ul#icon li {margin: 1px; position: relative; padding: 1px 0; cursor: pointer; float: left;  list-style: none;}
ul#icon span.ui-icon {float: left; margin: 0 1px;}
</style>
<link type="text/css" href="http://objects.jk-hosting.com/search/css/black-tie/jquery-ui-1.8.2.custom.css" rel="stylesheet" />
<script type="text/javascript" src="http://objects.jk-hosting.com/search/js/jquery-1.4.2.min.js"></script>
<script type="text/javascript" src="http://objects.jk-hosting.com/search/js/jquery-ui-1.8.2.custom.min.js"></script>
<script type="text/javascript">
function formHandler(form){
var URL = document.form.site.options[document.form.site.selectedIndex].value;
window.location.href = URL;
};

$(function(){
// Tabs
$('#tabs').tabs();
});
</script>
</head>
<body>
<div id="wrapper">
<div id="tabs"> <!-- Tabs start -->
<ul>
<li><a href="#tab-search">Search</a></li>
<li><a href="#tab-list">List Objects</a></li>
<li><a href="#tab-info">OP info</a></li>
</ul>

<div id="tab-search"><!-- Searchtab start -->
Please enter a string to search for, and choose a folder to search in. <br /><br />
<form name="Search">
<input type='hidden' value='search' name='type'>
<input value='<? print $qtext; ?>' type='text' name='q'> 
<select name='map'>
<option selected='selected' value='models'>Models</option>
<option value='avatars'>Avatars</option>
<option value='textures'>Textures</option>
<option value='seqs'>Seqs</option>
<option value='sounds'>Sounds</option></select> <input type='submit' value='Search'>
</form>
</div> <!-- Searchtab end -->

<div id="tab-list"><!-- Listtab start -->
Please pick a folder to browse. <br /><br />
<form name="form">
<select name="site" onChange="javascript:formHandler()">
<option value="#">Look in folder...</option>
<option value="<? print $page_url; ?>?type=list&map=models">Models</option>
<option value="<? print $page_url; ?>?type=list&map=avatars">Avatars</option>
<option value="<? print $page_url; ?>?type=list&map=textures">Textures</option>
<option value="<? print $page_url; ?>?type=list&map=seqs">Seqs</option>
<option value="<? print $page_url; ?>?type=list&map=sounds">Sounds</option>
</select>
</form>
</div> <!-- Listtab end -->

<div id="tab-info"><!-- Info tab start -->  
The OP currently contains: <br /><br />
<table>
<tr><td><b><? echo $models; ?></b></td> <td>Models</td></tr>
<tr><td><b><? echo $avatars; ?></b></td> <td>Avatars</td></tr>
<tr><td><b><? echo $textures; ?></b></td> <td>Textures</td></tr>
<tr><td><b><? echo $seqs; ?></b></td> <td>Seqs</td></tr>
<tr><td><b><? echo $sounds; ?></b></td> <td>Sounds</td></tr>
</table>
</div> <!-- Info tab end -->
</div> <!-- Tabs end -->
</div>

<!-- Start PHP generated content -->

<?
if($type=="search" || $type=="list") {
$M=$_GET['map'];
if($type=="search") {
$Q=$_GET['q'];
$empty="Nothing found with <b>\"" . $Q . "\"</b> in it's name.<br />\nPlease make a more general search query, or try a different folder.\n\n";
} else {
$Q="";
$empty='This folder is empty';
}
if($M=="textures") {
$ext="jpg";
} else {
$ext="zip";
}
$i=0;
print "<hr>\n";
$endfile=array();
$endsize=array();
$endsize2=array();
    foreach (glob($M."/*".$Q."*.".$ext) as $filename) {
$filename = explode(".", $filename);
$filename=$filename[0];
$filename = explode("/", $filename);
$filename=$filename[1];
$i++;
$endfile[$i]=$filename;
if($ext=="jpg") {
$endfile[$i]="<a name='".$endfile[$i]."' href='".$pageurl."?type=view&name=".$endfile[$i]."&folder=".$M."&from=".$type."&addon=".$Q."'>".$endfile[$i]."</a>";
}
$endsize[$i]=$size;
$endsize2[$i]=$size2;
}
if($i != 1) {
print "<b>".$i."</b> items were found.\n<hr>\n";
} else {
print "<b>".$i."</b> item was found.\n<hr>\n";
}
    echo("<table width='100%' border='" . $border_size . "' cellspacing='0' cellpadding='0' >\n");
if($i!=0) {
for ($t = 1; $t < $i; $t++) {
$thumbfile = $M."/".$endfile[$t].'.jpg';
if(file_exists($thumbfile)) {
$thumbnail = "<a name='".$endfile[$t]."' href='".$page_url."?type=view&name=".$endfile[$t]."&folder=".$M."&from=".$type."&addon=".$Q."'><ul id='icon'><li class='ui-state-default ui-corner-all' title='".$endfile[$t]."'><span class='ui-icon ui-icon-image'></span></li></ul></a>";
} else {
$thumbnail = "";
}
if($t=="1") {
echo("<tr><td width='10%'>Number</td><td width='3%'><ul id='icon'><li class='ui-state-default ui-corner-all' title='".$endfile[$t]."'><span class='ui-icon ui-icon-image'></span></li></ul></td><td width='60%'>Name</td></tr>\n");
}
echo("<tr><td>" . $t . "</td><td>".$thumbnail."</td><td>" . $endfile[$t] . "</td></tr>\n");
flush();
}
$thumbfile = $M."/".$endfile[$t].'.jpg';
if(file_exists($thumbfile)) {
$thumbnail = "<a name='".$endfile[$t]."' href='".$page_url."?type=view&name=".$endfile[$t]."&folder=".$M."&from=".$type."&addon=".$Q."'><ul id='icon'><li class='ui-state-default ui-corner-all' title='".$endfile[$t]."'><span class='ui-icon ui-icon-image'></span></li></ul></a>";
} else {
$thumbnail = "";
}
echo("<tr><td>" . $t . "</td><td>".$thumbnail."</td><td>" . $endfile[$t] . "</td></tr>\n");
}
print "</table>\n";     
if($i=="0") {
print $empty;
}
} elseif($type=="view") {
$filename=$_GET['name'];
$folder=$_GET['folder'];
  
if($_GET['from']=="list"){
$addon="?type=list&map=".$folder."#".$filename;
}

if($_GET['from']=="search"){
$addon="?type=search&q=".$filename."&map=".$folder."#".$filename;
}
print"<center><a href='".$home_url."'>Home</a></center>";
print "<hr>\n<center><img src='".$folder."/".$filename.".jpg'></img></center>\n<hr>\n<br />\n<a href='".$page_url."".$addon."'>Previous Page</a>\n";
}
$htmlshow="";
if($_GET['type']=="returnOPfile") {
if(isset($_GET['split'])) {
$splitter=$_GET['split'];
} else {
$splitter=" | ";
}
if(isset($_GET['html'])) {
$htmlshow="<br />";
}
foreach (glob("textures/*.jpg") as $texture){
if(isset($_GET['size'])) {
$size=$splitter.filesize($texture);
}
    $texture = explode("/", $texture);
$texture=$texture[1];
print "textures".$splitter.$texture.$size."\n".$htmlshow;
}
  
foreach (glob("models/*.zip") as $model){
if(isset($_GET['size'])) {
$size=$splitter.filesize($model);
}
    $model = explode("/", $model);
$model=$model[1];
print "models".$splitter.$model.$size."\n".$htmlshow;
}
  
foreach (glob("avatars/*.zip") as $avatar){
if(isset($_GET['size'])) {
$size=$splitter.filesize($avatar);
}
    $avatar = explode("/", $avatar);
$avatar=$avatar[1];
print "avatars".$splitter.$avatar.$size."\n".$htmlshow;
}
  
foreach (glob("seqs/*.zip") as $seq){
if(isset($_GET['size'])) {
$size=$splitter.filesize($seq);
}
    $seq = explode("/", $seq);
$seq=$seq[1];
print "seqs".$splitter.$seq.$size."\n".$htmlshow;
}
    foreach (glob("sounds/*.zip") as $sound){
if(isset($_GET['size'])) {
$size=$splitter.filesize($sound);
}
      $sound = explode("/", $sound);
$sound=$sound[1];
print "sounds".$splitter.$sound.$size."\n".$htmlshow;
}
}
?>

<!-- End PHP generated content -->

</body>
</html>


So right now my question to you PHP freaks is,
can you please help me edit my script so I can search through a remote directory?

*This* is one of the directories I wish to be able to search through & list..

Thanks in advance. 

Edit;
It might help if you know what the site currently looks like.
*Click*

I use the Wholesale Suite Premium Prices plugin with WooCommerce. I have 6 specific wholesale roles out of 15 that I wish to hide two specific shipping methods from being selected for the 6 exceptions. I'm just trying this on my staging server at this time using a code snippet example that I found and modified for my specific conditions. Would the following work for this purpose?

/* Hide specific shipping methods for specific wholesale roles */
add_filter( 'woocommerce_package_rates', function( $shipping_rates ) {
// User role and shipping method ID to hide for the user role
    $role_shipping_method_arr = array(
    'ws_silvia_silver' => array( 'Silvia Premium Standard Shipping (Tracking Service)'),
    'ws_silvia_silver_pst_exempt' => array( 'Silvia Premium Standard Shipping (Tracking Service)'),
    'ws_silvia_silver_tax_exempt' => array( 'Silvia Premium Standard Shipping (Tracking Service)'),
    'ws_silvia_silver' => array( 'Silvia Union Standard Shipping (Tracking Service)'),
    'ws_silvia_silver_pst_exempt' => array( 'Silvia Union Standard Shipping (Tracking Service)'),
    'ws_silvia_silver_tax_exempt' => array( 'Silvia Union Standard Shipping (Tracking Service)'),
    'ws_silvia_gold' =>    array( 'Silvia Premium Standard Shipping (Tracking Service)'),
    'ws_silvia_gold_pst_exempt' => array( 'Silvia Premium Standard Shipping (Tracking Service)'),
    'ws_silvia_gold_tax_exempt' => array( 'Silvia Premium Standard Shipping (Tracking Service)'),
    'ws_silvia_gold' =>    array( 'Silvia Union Standard Shipping (Tracking Service)'),
    'ws_silvia_gold_pst_exempt' => array( 'Silvia Union Standard Shipping (Tracking Service)'),
    'ws_silvia_gold_tax_exempt' => array( 'Silvia Union Standard Shipping (Tracking Service)'),
    );

    // Getting the current user role
    $curr_user = wp_get_current_user(); 
    $curr_user_data = get_userdata($current_user->ID); 

    // Wholesale Suite Roles 
    if (isset($current_user) && class_exists('WWP_Wholesale_Roles')) {
        $wwp_wholesale_roles = WWP_Wholesale_Roles::getInstance();
        $wwp_wholesale_role = $wwp_wholesale_roles->getUserWholesaleRole(); 

// Loop through the user role and shipping method pair
    foreach( $role_shipping_method_arr as $role => $shipping_methods_to_hide ) {

// Check if defined role exist in current user role or not
    if( in_array( $role, $current_user->roles) ) {

// Loop through all the shipping rates
    foreach( $shipping_rates as $shipping_method_key => $shipping_method ) {
$shipping_id = $shipping_method->get_id();

// Unset the shipping method if found
    if( in_array( $shipping_id, $shipping_methods_to_hide) ) {
unset($shipping_rates[$shipping_method_key]);
}
}
}
}
}
    return $shipping_rates;
});

Any insights as to how to accomplish this would be greatly appreciated. Lyse