PHP - When I Upload Logout.php To Server, It Logs Me Out On Every Page

I designed a web form that takes as input a file and that should upload that file on the server. The file is located on the client machine. The page containing the web form is handled by PHP script.

I found out (reading 9483658954 forum topics so far) that there are 2 methods for getting a file uploaded. The first one is using FTP, and the second one using $_FILES variable. Unfortunately i have complains regarding both of the methods.

Firstly, when attempting to upload the file using FTP it seems that rather the FTP server is calling "upload" a simple copy action (because the only successful thing i could do with FTP was to copy a file from location A to location B, both A and B being on the server) or I don't know to use FTP (which is probably the right answer). Then, when using $_FILES variable, I was forced to include ' enctype="multipart/form-data" ' in the form tag. After a long documentation I finally figured out that by including the enctype blah blah, the $_POST and $_FILES variables were NULL after the form was submitted.Still can't understand why!



Are there any other methods for uploading a file from the client machine to the server? Can I get a competent script for this?

Hi Guys

I don't why it happen. probably i missed out something.

Here is my code.

Code: [Select]
<?php
if($_REQUEST["xtvt"]=="addEdit")
{
$sql02="INSERT INTO attachment (remarks, attached_by, attached_date)
      VALUES('".$_REQUEST["remarks"]."', '".$_SESSION["SESSION_ID"]."', now())";
$res02=mysql_query($sql02);

//--------- attach file ----------------------------
$name = $_FILES["file"]["name"]; 
if ($name != "")
{
$selectDB="SELECT max(id) AS id FROM attachment";
$qryDB= @$res1=mysql_query($selectDB);
$fetchDB=mysql_fetch_array($qryDB);

$maxid=$fetchDB[0];
$result=move_uploaded_file($_FILES["file"]["tmp_name"], "upload//" . $_FILES["file"]["name"]);
if (!$result) {
echo "Error uploading file";
}
$update_faultLog = "UPDATE attachment SET attachment='$name' WHERE id='$maxid'";
$res1=mysql_query($update_faultLog);
}
}
?>

<table width="625" border="0">
  <tr>
    <td width="78">Select File <span class="style1">*</span></td>
    <td width="5">:</td>
    <td width="539"><input type="file" name="file" id="file"/></td>
  </tr>
  <tr>
    <td>Remarks <span class="style1">*</span></td>
    <td>:</td>
    <td><pre><textarea name="remarks" id="remarks" cols="45" rows="3"></textarea></pre></td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td><input type="reset" id="bttnReset" name="bttnReset" value="Reset" onclick="Reset()"/>
<input type="button" id="bttnAdd" name="bttnAdd" value="Add" onclick="addEdit()"/></td>
  </tr>
</table>

Its work at localhost but not when i put at server...

please help me...

Thank You

I need to upload an image using php and store the image as blob in mysql. I understand the standard way is to create a form for the user, let the user choose the image to upload, click submit.

But I need to create a php, for example, uploadImage.php?image="c:\myPhoto.jpg"
and when I type http:\\www.myhome.com\uploadImage.php?image="c:\myPhoto.jpg"
from a web browser in my pc, I can automatically upload myPhoto.jpg to the myhome.com server?

Thank you for your kind help.

Hi, ive recently created a gallery website and im happy with the way everything currently works. However the main drawback is the site uploads using a html webfom which is great for remote users or the odd image.

However, as i want to mass upload my existing collection i will need the ability to read a selected folder and then to carry out all the same processes that existed from the existing html form upload.

Im also using gdlibrary and checking file types to ensure they are within my allowed list, but im wondering if there are any other common security alerts i should be aware of to keep things a little bit safer if/when i publish outside of my LAN.

So in a nut shell i need some assistance with changing my upload process to work for more than one file at a time, ideally by reading a folder, or at least reading X amount of files at a time - processing them then moving onto next batch of files in the list.  Then the next part i need help with is checking/improving basic security of the system

i have php at server side and c++ at client side.what i am trying to do is to constantly look for files on server in folder on server if there’s a file in folder then download it on client side and delete it from server folder
this will happen again and again after 5minutes if a file is present on server in folder then download it and delete from server then in c++ goto sleep again fro 5 minutes and after 5 minutes do all this again if no file present in folder on server then simply do nothing.

My server is Linux/Apache/PHP.   When a file is uploaded, I use PHP's finfo_open to confirm that the file have the correct file extension matches and delete them if it doesn't match.  I also which file mimi types and size could be uploaded.   Things I do with the files include: Upload user's files and store them in some public directory (/var/www/html/users_public_directory/), and allow other users to directly download them. Upload user's files and store them in some private directory (/var/www/users_private_directory/), and allow other users to download them using X-Sendfile. Upload user's ZIP files and convert them to PDF files (unzip the ZIP file, and uses Libreoffice and Imagemagick's convert to convert them to PDFs). From the server's prospective, what are the risks of allowing users to upload files?  Are there some file types which are more dangerous to the server?  Could they be executed on the server, and if so, how could this be prevented?

    
    $account="54646456456464";
    $station= "12345";
    $options="11-1";
    $image="C:/Desktop/Sample Images/usco1.jpg";
    
    
$ch = curl_init();

curl_setopt($ch, CURLOPT_URL,"http://dfdgfsfs.com/kgdfgd.php");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, array(
            'image' => '@'.$image, 'account' => $account, 'station' => $station, 'options' => $options));


$postResult = curl_exec($ch);


curl_close ($ch);

$xmlobj = simplexml_load_string($postResult);

echo (string)$xmlobj->ID->attributes()->value;
echo (string)$xmlobj->FullName->attributes()->value;

All, I have spend days trying to figure this out without any luck.  I am now in crisis mode.  I need to get this working asap.  The following code works perfect on my local xampp machine.  As soon as I upload it to my web server, I don't get any data back.  I have narrowed it down to the image i am trying to send is not being received properly.  Thanks in advance.

I have a mysql table in which will be updated fairly frequently via php code on a form.
My question is how do I code a log of the changes made into another table using php or calling a stored procedure from within the database. or if you can think of a better way suggest it.  Stored procedure would be more secure if possible.

Hi,
on my cpanel I can see some errors:
[Mon Mar 12 08:41:05 2012] [error] [client 46.120.43.163] File does not exist: /home/affilinn/public_html/504.shtml, referer: http://www.mysite.com/admin/
[Mon Mar 12 08:33:25 2012] [error] [client 46.120.43.163] File does not exist: /home/affilinn/public_html/404.shtml
[Mon Mar 12 08:33:25 2012] [error] [client 46.120.43.163] File does not exist: /home/affilinn/public_html/404.shtml
[Mon Mar 12 08:30:12 2012] [error] [client 46.120.43.163] File does not exist: /home/affilinn/public_html/404.shtml
[Mon Mar 12 08:30:12 2012] [error] [client 46.120.43.163] File does not exist: /home/affilinn/public_html/favicon.ico
[Mon Mar 12 08:30:12 2012] [error] [client 46.120.43.163] File does not exist: /home/affilinn/public_html/504.shtml, referer: http://www.mysite.com/admin/
[Mon Mar 12 08:29:55 2012] [error] [client 46.120.43.163] File does not exist: /home/affilinn/public_html/404.shtml
[Mon Mar 12 08:29:55 2012] [error] [client 46.120.43.163] File does not exist: /home/affilinn/public_html/favicon.ico



what is that?

Hey gang,

Is there any way to view the apache error.log file in PHP?

what is the best way to add 1 to the database filed TimesLoggedIn after a user has logged in?


Regards

Ant

Hello,
I have php application, it is hosted on a shared server.
How can I view the errors in my application with the details of the error for my website users?

Thanks,

Hello

I am having problems uploading an image through a HTML form. I want the image to be uploaded to the server and the image name to be written to the mysql database.

Below is the code I am using:
Code: [Select]
<?php
if (isset($_POST['add'])){
   
   echo "<br /> add value is true";
      $name = $_POST['name'];   
      $description = $_POST['description'];   
      $price = $_POST['price'];
      $category_id = $_POST['category_name'];
      $image = $_FILES['image']['name'];   
      
      //file path of the image upload
      $filepath = "../images/";
      //mew name for the image upload
      $newimagename = $name;
      //new width for the image
      $newwidth = 100;
      //new height for the image
      $newheight = 100;
      
      include('../includes/image-upload.php');
      
      
      mysql_query("INSERT INTO item (item_name, item_description, item_price, item_image)
      VALUES ('$name','$description','$price','$image')"); ?>

Here is the image-upload.php file code:

Code: [Select]
<?php

//assigns the file to the image
$image =$_FILES["image"]["name"];
$uploadedfile =$_FILES["image"]["tmp_name"];

if ($image) {
   //retrieves the extension type from image upload
   $extension = getextension($image);
   //converts extension to lowercase
   $extension = strtolower($extension);
   
   //create image from uploaded file type
   if($extension=="jpg" || $extension=="jpeg") {
      $uploadedfile = $_FILES['image']['tmp_name'];
      $src = imagecreatefromjpeg($uploadedfile);
   }else if($extension=="png") {
      $uploadedfile = $_FILES['image']['tmp_name'];
      $src = imagecreatefrompng($uploadedfile);
   }else{
      $src = imagecreatefromgif($uploadedfile);
   }
   
   //creates a list of the width and height of the image
   list($width,$height)=getimagesize($uploadedfile);
   
   //adds color to the image
   $tmp = imagecreatetruecolor($newwidth,$newheight);
   
   //create image
   imagecopyresampled($tmp,$src,0,0,0,0,$newwidth,$newheight,$width,$height);
   
   //set file name
   $filename = $filepath.$newimagename.".".$extension;
   $imagename = $newimagename.".".$extension;
   //uploads new file with name to the chosen directory
   imagejpeg($tmp,$filename,100);
   
   //empty variables
   imagedestroy($src);
   imagedestroy($tmp);
   
}


?>
Any help would be appreciated, fairly new to all this!

Thanks!!!

basically could somebody help me with information on having a php script that deletes mysql rows which are older than 3 hours old.
I know MYSQL table will need a date/time column but how can I only target ones which are 3 hours old+.
Thanks