PHP - Image Upload Permission Problem

hi i have wrote this code for uploading an image this is my main code


<?php
$lastimage2 =   mysql_query("SELECT * FROM images WHERE id=$view");
$li2 = mysql_fetch_assoc($lastimage2);

if ($page=="P8"&$view>0)
   {
   echo "<table class=roung bgcolor='#000000'><tr><TD><img src=uploaded/$li2[picname] width='760' height='540'></td></tr></table>";
   include 'picclicks.php';
   echo "<tr><td>Views: $clicks2 </td></tr>";
   
   }
   else
   {
if ($_SESSION['user'])
 {
 If ($imagereport='1')
 {
 }
 echo"
 <table bgcolor='#000000' class=round><tr><td class=ach>
<form action='index.php?variable=".$page."&fun=upload' method='POST' enctype='multipart/form-dat'>
<input type='file' name='myfile'>

<input type='submit' value='Upload'>

</td></tr></table></form>
";
 }
else
{
echo "Please Login to upload new photos!";
}
?>


then i have this for imageupload.php

<?php
if ($_FILES)
{
$username = $_SESSION['user'];
$date =time();
$name = $_FILES["myfile"]["name"];
$type = $_FILES["myfile"]["type"];
$size = $_FILES["myfile"]["size"];
$temp = $_FILES["myfile"]["tmp_name"];
$error = $_FILES["myfile"]["error"];
$hs=$_POST['High Score'];
$g=$_POST['Glitch'];
$f=$_POST['Funny'];
$o=$_POST['Other'];

 $tags = new Array();
foreach($_POST['tag'] as $tag){
   if($tag){
       tags[] = $tag;
   }
}
$tag = implode(',',$tags);

if ($error > 0 )
   die("Error uploading file! Code $error.");
   else
   {
      if ($type =="image/jpeg")
         {
         include 'connect.inc';
         move_uploaded_file($temp,"uploaded/".$name);
         mysql_query("INSERT INTO images VALUES('','$name','','$username','$date','0','0','0','0','0','0','0','0')");
      $uploadreport='1';
         
         }   
      else
         {
         }

   }
}
else
{
}

?>

my database is set right, and this is what i have in my index file




if ($fun=="upload")
{
include 'imageupload.php';
}


when i click upload it directs it to index.php?variable=P8&fun=upload but nothing shows up on screen
if u need more details please ask 

cheers matt

I am looking to make an image uploader for my site. I have written the image upload file but its so basic im fearing it will be broken and if someone uploads an image with the same name it will just copy over someone elses.
I also need to check that its either jpeg or gif and maybe downsize the image so no one uploads a 5meg phot from a digital camera and crashes the site.
Does anyone have any ideas how to do the 3 things above?

i need to make Registration Script With Photo Upload but the problem is the photo only save in temporary folder not in my database.

here my php code
<?php

$name = $_POST['name'];
$uname = $_POST['uname'];
$email = $_POST['email'];
$pwd = $_POST['pass'];
$up = $_POST['fileToUpload'];
$id= $_POST['id'];





$insert ="INSERT INTO users (name,username,emailadd,password,userphoto) VALUES ('{$name}','{$uname}','{$email}',SHA1('{$pwd}'),'{$up}')" ;






if(!empty($_FILES['fileToUpload']))
{
   
   if($_FILES['fileToUpload']['type']=="image/jpeg");
   {   
   
      $dest = "images/{$id}.jpg";

      if (move_uploaded_file($_FILES['fileToUpload']['tmp_name'],$dest))
      {

      $a .=",userphoto ='{$dest}'";
      print "File successfully uploaded";

      }

   }
}

$q .= " WHERE userID='{$id}'";

require_once("dbconnect.php");

mysqli_query($conn,$insert);

if(mysqli_affected_rows($conn) <= 0)
{
   print "Unable to create account.Please <a href='reg.html'>click here</a>to try again.";
}
else
{
   mysqli_close($conn);
   header("Location:login.php?sebab=newreg");
   exit();
}

mysqli_close($conn);


?>

 

Hi im having trouble with uploading images with spaces in as they dont show up in the browser.
Here is the code:
Code: [Select]
$image = addslashes($_FILES['image']['name']);

 $target = "images/";
 $target = $target . basename( $_FILES['image']['name']);
 
  //Writes the photo to the server
 if(move_uploaded_file($_FILES['image']['tmp_name'], $target))
 {

Any help would be appreciated.

This topic has been moved to PHP Installation & Configuration.

http://www.phpfreaks.com/forums/index.php?topic=307015.0

Hello

I built a component for a non-profit organisation which want to use the 404page to promote several charities.
In order to do that I want to place a file 'error.php' in the map 'templates/system'.

I use the RENAME function for that.

So far so good. On many sites it works fine, but on other  sites I get an error on the rename function.

The user-id and the group-id of the script I use are the same as the uid's of 'templates/system'. So there shouldn't be a problem.

If I add public write to the filepermissions of 'templates/system'/ with Filezilla the error disappears. But I can't do that with the php chmod function, again because of too less priviliges.

HELP, I can't find an explanation for that and that's driving me crazy.

thanks in advance

Im in the process of setting up a social media site , Just switched from basic hosting to Dedicated Server
Everything was working till i switched .

I have a basic join forum and email activation , On the register.php file it tell script to make a directory mkdir into member/folder like this below, But it will  make the folder for the id of that user but will not let them upload any images?. At first it wouldnt even make a folder but i found out it was a permissions issue with my server i fixed it , im guessing the upload is also a permission's issue ? But the script automaticly make the members/"$id" folder and i dont know how to set permission for auto create folder that if i even have to ? so confused.

(BEGGGGINGG !! FORRRRR HELPPPPPPPPPPPPPPPPPPPP!
Im running a dedicated server with godaddy, On centOs w/ Plesk Panel 9.3.0
-------------------------------------------------------------------------------------------

$id = mysql_insert_id();

// Create directory(folder) to hold each user's files(pics, MP3s, etc.)
mkdir("members/$id", 0755);

I am getting this error Warning: ftp_put() [function.ftp-put]: Can't open that file: Permission denied in /home/chris/public_html/site-name/wp-content/setup.php on line 62

Code: [Select]
$conn_id = ftp_connect($host, 21) or die ("Cannot connect to host");
  ftp_login($conn_id, $usr, $pwd) or die("Cannot login");

// turn on passive mode transfers (some servers need this)
// ftp_pasv ($conn_id, true);

  $upload = ftp_put($conn_id, $file[0], $file[1], FTP_ASCII);

  print (!$upload) ? die('Cannot upload') : 'Upload complete';
  print "\n";

The permissions to the file is 0644, if I change it to 0777 ftp_put complains and says the file is not found.

How can I ftp this file? What is going on?

Thanks,
Chris

Hi.  I'm using SimpleImage.php to do some basic image manipulation.  The code is here http://www.white-hat-web-design.co.uk/articles/php-image-resizing.php, but I don't think all the details are important.  Basically, I'm trying to read and image and save it with a different name.  I'm really new with this stuff, so it's probably something simple.

Anyway, here is the code throwing the error,

$image_info = getimagesize($filename);

where $filename is a string containing the path to the image I want to load, e.g. $filename="images/picture.jpg";  It's throwing a "Read Error!"
I know that the path is correct.  In fact I first check if the file is there using is_file($filename); and it returns true.  I'm guessing that maybe php does not have "permission" to read this file.  The permissions for the file are
-rw-r--r-- 1 www-data www-data 80211 2011-04-20 16:19 picture.jpg

Looks like everyone has "read" permission, so I don't see what the problem is.  Also, the permissions of the folder and all parent folders are 777.  Not sure what the problem is.  I might be way off by guessing that it is a permissions problem.

Any help would be great.  Thanks.

Also, I was wondering if there is a way for this forum to email me whenever there is a reply to my posts.  I can't seem to find the option anywhere.

I have a PHP web system that store in a windows server. In the system, there is a function for user to upload files to another server (Shared server in Unix).

When i try to upload a file, it gives warning:

Warning: move_uploaded_file(\\unixserver/sharedfolder/upload/test.txt) [function.move-uploaded-file]: failed to open stream: Permission denied in C:\wamp\www\upload\index.php on line 40

For your information, my username has been assigned in xxx's group that has access to read and write on that folder. Besides, i'm able to open,create and delete files on that folder's server manually (samba).

The safe mode setting is off.

Does anybody has any idea why this thing happen?

How can i edit just one image at on time with a multiple image upload form? I have the images being stored in a folder and the path being stored in MySQL. I also have the files being uploaded with a unique id. My issue is that I want to be able to pass the values of what is already in $name2 $name3 $name4 if I only want to edit $name1. I don't want to have to manually update the 4 images. Here is the PHP:
Code: [Select]
<?php

require_once('storescripts/connect.php');
mysql_select_db($database_phpimage,$phpimage);
$uploadDir = 'upload/';
if(isset($_POST['upload']))
{


foreach ($_FILES as $file)
{

    $fileName = $file['name'];
    $tmpName = $file['tmp_name'];
    $fileSize = $file['size'];
    $fileType = $file['type'];

    if ($fileName != ""){
        $filePath = $uploadDir;
        $fileName = str_replace(" ", "_", $fileName);

        //Split the name into the base name and extension
        $pathInfo = pathinfo($fileName);
        $fileName_base = $pathInfo['fileName'];
        $fileName_ext = $pathInfo['extension'];

        //now we re-assemble the file name, sticking the output of uniqid into it
        //and keep doing this in a loop until we generate a name that 
        //does not already exist (most likely we will get that first try)
        do {
           $fileName = $fileName_base . uniqid() . '.' . $fileName_ext;
        } while (file_exists($filePath.$fileName));

$file_names [] = $fileName;

        $result = move_uploaded_file($tmpName, $filePath.$fileName);
    }


if(!get_magic_quotes_gpc())
{
$fileName = addslashes($fileName);
$filePath = addslashes($filePath);
}
$fileinsert[] = $filePath;
}
}

$mid   = mysql_real_escape_string(trim($_POST['mid']));
$cat   = mysql_real_escape_string(trim($_POST['cat']));
$item  = mysql_real_escape_string(trim($_POST['item']));
$price = mysql_real_escape_string(trim($_POST['price']));
$about = mysql_real_escape_string(trim($_POST['about']));

$fields = array();
$values = array();
$updateVals = array();
for($i = 0; $i < 4; $i++)
{
    $values[$i] = isset($file_names[$i]) ? mysql_real_escape_string($file_names[$i]) : '';

    if($values[$i] != '') {
        $updateVals[] = 'name' . ($i + 1) . " = '{$values[$i]}'"; 
    }
}
$updateNames = '';
if(count($updateVals))
{
    $updateNames = ", " . implode(', ', $updateVals);
}

$update = "INSERT INTO image
               (mid, cid, item, price, about, name1, name2, name3, name4)
           VALUES
               ('$mid', '$cat', '$item', '$price', '$about', '$values[0]', '$values[1]', '$values[2]', '$values[3]')
           ON DUPLICATE KEY UPDATE
                cid = '$cat', item = '$item', price = '$price', about = '$about' $updateNames";
$result = mysql_query($update) or die (mysql_error());

Hello

I am having problems uploading an image through a HTML form. I want the image to be uploaded to the server and the image name to be written to the mysql database.

Below is the code I am using:
Code: [Select]
<?php
if (isset($_POST['add'])){
   
   echo "<br /> add value is true";
      $name = $_POST['name'];   
      $description = $_POST['description'];   
      $price = $_POST['price'];
      $category_id = $_POST['category_name'];
      $image = $_FILES['image']['name'];   
      
      //file path of the image upload
      $filepath = "../images/";
      //mew name for the image upload
      $newimagename = $name;
      //new width for the image
      $newwidth = 100;
      //new height for the image
      $newheight = 100;
      
      include('../includes/image-upload.php');
      
      
      mysql_query("INSERT INTO item (item_name, item_description, item_price, item_image)
      VALUES ('$name','$description','$price','$image')"); ?>

Here is the image-upload.php file code:

Code: [Select]
<?php

//assigns the file to the image
$image =$_FILES["image"]["name"];
$uploadedfile =$_FILES["image"]["tmp_name"];

if ($image) {
   //retrieves the extension type from image upload
   $extension = getextension($image);
   //converts extension to lowercase
   $extension = strtolower($extension);
   
   //create image from uploaded file type
   if($extension=="jpg" || $extension=="jpeg") {
      $uploadedfile = $_FILES['image']['tmp_name'];
      $src = imagecreatefromjpeg($uploadedfile);
   }else if($extension=="png") {
      $uploadedfile = $_FILES['image']['tmp_name'];
      $src = imagecreatefrompng($uploadedfile);
   }else{
      $src = imagecreatefromgif($uploadedfile);
   }
   
   //creates a list of the width and height of the image
   list($width,$height)=getimagesize($uploadedfile);
   
   //adds color to the image
   $tmp = imagecreatetruecolor($newwidth,$newheight);
   
   //create image
   imagecopyresampled($tmp,$src,0,0,0,0,$newwidth,$newheight,$width,$height);
   
   //set file name
   $filename = $filepath.$newimagename.".".$extension;
   $imagename = $newimagename.".".$extension;
   //uploads new file with name to the chosen directory
   imagejpeg($tmp,$filename,100);
   
   //empty variables
   imagedestroy($src);
   imagedestroy($tmp);
   
}


?>
Any help would be appreciated, fairly new to all this!

Thanks!!!

I have a working image upload script that uploads, renames the file and adds filename to the database.

is it possible to include some sort of image resize code? if so can anyone point me in the right direction or better still show some example code and explain how it works etc.

below is my working code:

Code: [Select]
<?php
$rand = mt_rand(1,9999999);
$member_id = $_SESSION['SESS_MEMBER_ID'];
$caption = $_POST["caption"];

if(isset($_FILES['uploaded']['name']))
{
$allowed_filetypes = array('.jpg','.gif','.bmp','.png','.jpeg');
$max_filesize = 524288; // Maximum filesize in BYTES (currently 0.5MB) 
    $fileName = basename($_FILES['uploaded']['name']);
$errors = array();
$target = "gallery/";
$fileBaseName = substr($fileName, 0, strripos($fileName, '.'));

   // Get the extension from the filename.
   $ext = substr($fileName, strpos($fileName,'.'), strlen($fileName)-1); 
 
   //$newFileName = md5($fileBaseName) . $ext;
   $newFileName = $target . $rand . "_" . $member_id.$ext;
   
   // Check if filename already exists
   if(file_exists("gallery/" . $newFileName)) 
    {
     $errors[] = "The file you attempted to upload already exists, please try again.";
    }
   // Check if the filetype is allowed.
   if(!in_array($ext,$allowed_filetypes))
    {
         $errors[] = "The file you attempted to upload is not allowed.";
    }
    
// Now check the filesize.
   if(!filesize($_FILES['uploaded']['tmp_name']) > $max_filesize)
    {
         $errors[] = "The file you attempted to upload is too large.";
    }
  
    // Check if we can upload to the specified path.
   if(!is_writable($target))
    {
         $errors[] = "You cannot upload to the specified directory, please CHMOD it to 777.";
    }
 
    //Here we check that no validation errors have occured.
    if(count($errors)==0)
    {

//Try to upload it.
        if(!move_uploaded_file($_FILES['uploaded']['tmp_name'], $newFileName))
        {
            $errors[] = "Sorry, there was a problem uploading your file.";
        }
    }
    //Lets INSERT database information here
    if(count($errors)==0)
    {
$result = mysql_query("INSERT INTO `gallery` (`image`, `memberid`, `caption`) VALUES ('$newFileName', '$member_id', '$caption')")
    or die (mysql_error()); 

}
    //If no errors show confirmation message
    if(count($errors)==0)
    {
         echo "<div class='notification success png_bg'>
<a href='#' class='close'><img src='img/cross_grey_small.png' title='Close this notification' alt='close' /></a>
<div>
Image has been uploaded.<br>\n
</div>
</div>";


//echo "The file {$fileName} has been uploaded";
echo "<br>\n";
echo "<a href='gallery.php'>Go Back</a>\n";

   }
    else
    {
        //show error message
        echo "<div class='notification attention png_bg'>
<a href='#' class='close'><img src='img/cross_grey_small.png' title='Close this notification' alt='close' /></a>
<div>
Sorry your file was not uploaded due to the following errors:<br>\n
</div>
</div>";
//echo "Sorry your file was not uploaded due to the following errors:<br>\n";
        echo "<ul>\n";
        foreach($errors as $error)
        {
            echo "<li>{$error}</li>\n";
        }
        echo "</ul>\n";
echo "<br>\n";
echo "<a href='gallery.php'>Go Back</a>\n";
    }
    
}
else
{
    //Show the form
echo "Use the following form below to add a new image to your gallery;<br /><br />\n";
    echo "<form enctype='multipart/form-data' action='' method='POST'>\n";
    echo "Please choose a file:<br /><input class='text' name='uploaded' type='file' /><br />\n";
echo "Image Caption:<br /><input class='text' name='caption' type='text' value='' /><br /><br />\n";
    echo "<input class='Button' type='submit' value='Upload' />\n";
    echo "</form>\n";

}
?>
Many thanks to phpfreaks again.

hello friends,

while clicking the form all the information goes to database, I have one image upload field,
when cliking the submit button, i would like 'image name' to go in database and file to go in
/upload folder, i have tried this for hours and gave up,

if anyone help me in this, i would be very greatful

Hi,

Im rather new to php and really unable to get the above to work. Everything works apart from the image being resized. File is uploaded, and the image name is printed into the SQL database. But i cant for the life of me get the image to go to 300x200? If you could help me i would be very grateful

My code for the form processing page is attached. Ive put a few line breaks into the code as to where i think is the issue. I just cant seem to resize the image. Does the image resize need to come before the part it writes the image to the server or can this be done afterwards? Please help.

P.S - Thanks in advance