PHP - Permission Denied In Php File Read When File Owner Is Not Apache

 

Hmm, hello everyone, i'm running my php in an ubuntu server and I'm trying to run a command using exec (i.e. 'echo 1 > /var/www/test.txt') but I always get a permission denied issue, although i've already changed the permissions to 777 (read-write-execute)

Any solution?

Maybe never mind.  Just noticed ssphpd doesn't have a group...

ps.  do I have the umask part right?

Edit 2.  No, it didn't help...

I have two users (ssphpd and apache) which will need to write files to a given directory and its subdirectories.  My intent was to set them up with ssphd's group and use the setgid to make all future files and directories inherit that group.   Not sure, but I don't think I have this right yet as I indicate at the end of this post.

[michael@bb5 ~]$ sudo useradd -r ssphpd
[michael@bb5 ~]$ sudo usermod -aG wheel ssphpd
[michael@bb5 ~]$ sudo usermod -aG wireshark ssphpd
[michael@bb5 ~]$ sudo usermod -aG ssphpd apache
[michael@bb5 ~]$ groups apache
apache : apache ssphpd
[michael@bb5 ~]$ groups ssphpd
ssphpd : ssphpd wheel wireshark
[michael@bb5 ~]$
[michael@bb5 ~]$ sudo chmod g+rwx -R /var/www/~/storage
[michael@bb5 ~]$ sudo chown michael.ssphpd -R /var/www/~/storage
[michael@bb5 ~]$ sudo chmod g+s /var/www/~/storage

My script to write this files is below:

    public function setFile(array $file, string $nameAlias):void {
        $path=$this->getPath($nameAlias, true);
        $this->moveTo($file['tmp_name'], $path);
    }

    private function getPath(string $name, bool $create):string {
        //$name is 20 characters
        $p1=$this->uploadDirectory.'/'.substr($name,0,2);
        $p2=$p1.'/'.substr($name,2,3);
        $p3=$p2.'/'.substr($name,5,4);
        $old_umask = umask(0);
        if($create) {
            if(!file_exists($p1)){mkdir($p1, 0775);}
            if(!file_exists($p2)){mkdir($p2, 0775);}
            if(!file_exists($p3)){mkdir($p3, 0775);}
        }
        umask($old_umask);
        return $p3.'/'.substr($name,9);
    }

    private function moveTo(string $tmpname, string $path):void {
        syslog(LOG_ERR, "attempting to move $tmpname to $path");
        $uid = posix_getuid();
        syslog(LOG_ERR, "user PHP is running as: $uid - ".posix_getpwuid($uid)['name']);
        $gid = posix_getgid();
        syslog(LOG_ERR, "group PHP is running as: $gid - ".posix_getpwuid($gid)['name']);
        $this->test($tmpname);
        $this->test(substr($path,0,-12));
        syslog(LOG_ERR, move_uploaded_file($tmpname, $path)?'success':'failure');
    }

    private function test(string $file):void {
        syslog(LOG_ERR, "$file is writable: ".(is_writable($file)?'yes':'no'));
        $uid=fileowner($file);
        syslog(LOG_ERR, "$file owner: $uid - ".posix_getpwuid($uid)['name']);
        $gid=filegroup($file);
        syslog(LOG_ERR, "$file group: $gid - ".posix_getpwuid($gid)['name']);
        $perms=fileperms($file);
        syslog(LOG_ERR, "$file permissions: $perms - ".$this->formatPerms($perms));
    }

However, as seen, not only can only apache write files, the newly created directories are displaying apache's group instead of ssphp's group.

Any ideas?

Jun 06 19:40:29 bb5.net Server[8485]: attempting to move /tmp/DL_TS_6n0kmr to /var/www/dev/storage/uploads/45/699/ed6c/d15fd6959b6
Jun 06 19:40:29 bb5.net Server[8485]: user PHP is running as: 989 - ssphpd
Jun 06 19:40:29 bb5.net Server[8485]: group PHP is running as: 986 -
Jun 06 19:40:29 bb5.net Server[8485]: /tmp/DL_TS_6n0kmr is writable: yes
Jun 06 19:40:29 bb5.net Server[8485]: /tmp/DL_TS_6n0kmr owner: 989 - ssphpd
Jun 06 19:40:29 bb5.net Server[8485]: /tmp/DL_TS_6n0kmr group: 986 -
Jun 06 19:40:29 bb5.net Server[8485]: /tmp/DL_TS_6n0kmr permissions: 33152 - rrw-------
Jun 06 19:40:29 bb5.net Server[8485]: /var/www/dev/storage/uploads/45/699/ed6c is writable: yes
Jun 06 19:40:29 bb5.net Server[8485]: /var/www/dev/storage/uploads/45/699/ed6c owner: 989 - ssphpd
Jun 06 19:40:29 bb5.net Server[8485]: /var/www/dev/storage/uploads/45/699/ed6c group: 986 -
Jun 06 19:40:29 bb5.net Server[8485]: /var/www/dev/storage/uploads/45/699/ed6c permissions: 16893 - drwxrwxr-x
Jun 06 19:40:29 bb5.net Server[8485]: failure

Jun 06 19:40:32 bb5.net Api[6981]: attempting to move /tmp/phpy1CRQR to /var/www/dev/storage/uploads/ec/911/7ab7/c73065bff0b
Jun 06 19:40:32 bb5.net Api[6981]: user PHP is running as: 48 - apache
Jun 06 19:40:32 bb5.net Api[6981]: group PHP is running as: 48 - apache
Jun 06 19:40:32 bb5.net Api[6981]: /tmp/phpy1CRQR is writable: yes
Jun 06 19:40:32 bb5.net Api[6981]: /tmp/phpy1CRQR owner: 48 - apache
Jun 06 19:40:32 bb5.net Api[6981]: /tmp/phpy1CRQR group: 48 - apache
Jun 06 19:40:32 bb5.net Api[6981]: /tmp/phpy1CRQR permissions: 33152 - rrw-------
Jun 06 19:40:32 bb5.net Api[6981]: /var/www/dev/storage/uploads/ec/911/7ab7 is writable: yes
Jun 06 19:40:32 bb5.net Api[6981]: /var/www/dev/storage/uploads/ec/911/7ab7 owner: 48 - apache
Jun 06 19:40:32 bb5.net Api[6981]: /var/www/dev/storage/uploads/ec/911/7ab7 group: 48 - apache
Jun 06 19:40:32 bb5.net Api[6981]: /var/www/dev/storage/uploads/ec/911/7ab7 permissions: 16893 - drwxrwxr-x
Jun 06 19:40:32 bb5.net Api[6981]: success

 

Edited June 6, 2019 by NotionCommotion

Hello

I built a component for a non-profit organisation which want to use the 404page to promote several charities.
In order to do that I want to place a file 'error.php' in the map 'templates/system'.

I use the RENAME function for that.

So far so good. On many sites it works fine, but on other  sites I get an error on the rename function.

The user-id and the group-id of the script I use are the same as the uid's of 'templates/system'. So there shouldn't be a problem.

If I add public write to the filepermissions of 'templates/system'/ with Filezilla the error disappears. But I can't do that with the php chmod function, again because of too less priviliges.

HELP, I can't find an explanation for that and that's driving me crazy.

thanks in advance

Hi


I have an image uploading script that won't upload images...


It worked at one point when i had folder permission at 0777 but i was told that is risky so i changed it to 0775


Now it won't work and i can't use 0777.




Any one know what i need to do to get it to work?

This is my script:
Code: [Select]
<?php
$salt = 35322232414;
$name = $salt.$safe;


$name = md5($name);


if(isset($_POST['submit'])){ 
if ((($_FILES["file"]["type"] == "image/gif")
|| ($_FILES["file"]["type"] == "image/jpeg")
|| ($_FILES["file"]["type"] == "image/png")
|| ($_FILES["file"]["type"] == "image/gif")
|| ($_FILES["file"]["type"] == "image/pjpeg"))
&& ($_FILES["file"]["size"] < 1000000))
  {
  if ($_FILES["file"]["error"] > 0)
    {
    echo $_FILES["file"]["error"];
    }
  else
    {
   $filename = md5(serverdate()) . $_FILES["file"]["name"];
    if (file_exists("userimages/".$name."/".$filename))
      {
      echo "Image already uploaded!";
      }
    else
      {
   if (is_dir("userimages/".$name) == FALSE){
      mkdir("userimages/".$name, 0775); //permissions 
   }


   
      move_uploaded_file($_FILES["file"]["tmp_name"], "userimages/".$name."/" . $filename);
     echo "Image has been uploaded!";
      
}

Error i get:

Quote

Warning: move_uploaded_file(images/73640de25b7d656733ce2f808a330f18/7fc9cb9cf5ae1f7a5dd9105d3f9559fb_63.jpg) [function.move-uploaded-file]: failed to open stream: Permission denied in uploadfile.php on line 41


Warning: move_uploaded_file() [function.move-uploaded-file]: Unable to move '/tmp/phpjrX3SO' to 'images/73640de25b7d656733ce2f808a330f18/7fc9cb9cf5ae1f7a5dd9105d3f9559fb_63.jpg' in uploadfile.php on line 4

Hi,

On login page load, (even before submitting user name and pass)

Debugger finds "permission denied error", can see it he goldpharm.co.il/authentication.php

Now, when a user submit's user name and pass, nothing happens, it stays on the login page.

I am not sure in what code the bug is ,
can you tell by the bug error in this page: goldpharm.co.il/authentication.php ?
and how can it be fixed? , should I post the code?
Thanks.

I am trying to run the following code to upload a file. (WAMP using Win XP). Once I select the file and click submit I get the error: "Forbidden... You don't have permission to access /< on this server." with URL http://localhost/<?=$PHP_SELF?>
Code is below:

<form action="<?=$PHP_SELF?>" method="post" enctype="multipart/form-data">
<br/><br/>
Choose a file to upload:<br/>
<input type="file" name="upload_file">
<br/>
<input type="submit" name="submit" value="submit">
</form>


TIA

Day

I'm using Codeigniter and inside the framework I create a file with PHP code
(Codeigniter doesn't provide means to create files) by copying from a template
file, set the permissions to 0775 and the ownership is ruled by sticky bits on the
directory hosting the file. The ownership is set to the Apache settings (http:http),
just to be 'sure'...

If I try to point to it, the web-server doesn't deliver due to permission issues.

All this is done in a 'register function' where I create some fields in a SQL
database to save user credentials. As of now the application should be
obvious.

If I put the user credentials into the database 'by hand' and likewise when I
create a file in the above mentioned directory (http:http) 'by hand' and point
the web-server on it, it gets delivered. Even if I keep the original ownership
conditions 'user:http'.

I'm pretty sure this issue has been existed before and I'd appreciate any help.
I'm also sure it has in some way to do with either file creation permissions
or/and the user running PHP. I was going far from that PHP (more precise
mod_php) is running as the same user as Apache?

 

Thanks for your help in forward.

Gee

Edited August 17, 2020 by bogus

This topic has been moved to PHP Applications.

http://www.phpfreaks.com/forums/index.php?topic=351056.0

I'm getting this error when I try to fwrite to a directory:
Quote

failed to open stream: Permission denied



I have added the user www-data to the group which has permission to the directory?

The directory is this:
/home/directory1/documents

directory1 = drwxr-x---
documents = drwxrwx---

Does anyone know whats going on?

I'm trying to open a URL using fopen() and I keep getting this error:
Code: [Select]
Failed to open stream: Permission deniedI can not work out what is wrong, it's not a firewall as far as I can tell.

how can I make php read a file with ids in the format

23423423
32423423
23423454
56667777

and output each id to $id[]?

Hi there,

I have an xml file which actually hold the currency conversion information which I downloaded from xe.com

In the xml, the currency section snapshot looks like this:

<currency>
<csymbol>EUR</csymbol>
<cname>Euro</cname>
<crate>0.713</crate>
<cinverse>1.403 </cinverse>
</currency>
this is the conversion of USD to Euro. And it tells how much is 1USD gonna be in Euros. i.e 1 USD = 0.713 EUR

I have a product page on my website having the rates shown in USD.

For the visitor is accessing the page from Europe it has to show the converted price in Euros.

My application can detect the visitors country if hes accessing the page from Europe so that is not a problem.

I just need to read the xml file and display the converted price based on the rates in the xml file.

How can I read the xml file and output the price in Euros based on the rate.

Thank you.

All comments and feedbacks are always welcome

[LIST=1]
CSV File Reading
Displaying CSV file: Clicking the Show Logfile.txt link at the top of the page should display the CSV records inside logfile.txt
Displaying CSV records formatted : Clicking the Show logfile.txt Formatted should display the CSV records formatted in an HTML table is descending order (more recent records are at the top).
Use this function to convert CSV records back to an array : fgetcsv()
   
I have most of this done and the problem I'm having is trying to read what  I put into the file. (I hard coded what should go into the file). Could you tell me what I'm doing wrong and what I should do to fix it?

Code: [Select]
<?
 
 if ($_POST['_act'] = 'csv'):
$fp = fopen('logfile.txt', 'a');
while (($data = fgetcsv($fp, 1000, ",")) !== FALSE){
print_r($data);
}
fclose($fp);
 endif;
 
if ($_SERVER['REQUEST_METHOD'] == 'POST'):

if (empty($_POST['fullname'])):
$errMsg['fullname'] = "Please fill in Your Full Name.";
endif;
if (ereg("'Mr\. '", $_POST['fullname']) == false):
$errMsg['fullname'] = "Please fill in Your Full Name.";
endif;
print_r($errMsgs); echo count($errMsgs);

if (count($disperrMsgs > 0)):
$dispErrMsgs = true;
else:
$fp = fopen('logfile.txt', 'a');
$fputcsv($fp, array("test", "lol", "roool"));
fclose($fp);


$dispSuccessMsg = true;
endif;


endif;
?>

<html>
<head>

 
<style type="text/css">
h1 {color:red}
div.error {border: 1px solid red; margin: 20px; padding: 20px; width: 400px}
table {border: 1px solid #CCC; margin: 20px; border-collapse: collapse;}
td, th {border: 1px solid #DDD; padding: 2px}
th {background-color:#363; color: white}
td.error {color:red}
div.success  {border: 1px solid green; margin: 20px; padding: 20px; width: 400px; color:green}
</style>
</head>
<body> 
<h1> Form Validation Lab with  Reg Expressions  </h1>
<p><a href="<?= $_SERVER['PHP_SELF'] ?> ">Refresh This Page</a> | <a href="./logfile.txt">Show Logfile.txt</a> | 
<a href="<?= $_SERVER['PHP_SELF'] ?>?_act=csv">Show logfile.txt Formatted</a> 
    <a href="<?= $_SERVER['PHP_SELF'] ?>?_act=clear">Clear logfile.txt </a></p>
   
<? if ($dispErrMsgs): ?>
<div class="error">
<p>There are errors in the code: </p>
    <ol>
    <? foreach($errMsg as $errMsgs ): ?>
        <li><?= $errMsgs ?></li>
            <? endforeach; ?>
            </ol>
    </div>
<? endif; ?>
<? if ($dispSuccessMsg): ?>
<div class="success">
<p>Thank you for your submission. </p>
</div>
<? endif; ?>


<form action="<?= $_SERVER['PHP_SELF'] ?>"  name="getstuff" method="post" >
  <input type="hidden" name="_act" value="post">
  <table cellspacing = "0">
    <tr>
      <th width="78">Full Name:</th>
      <td width="184"><input name="fullname" type="text" class="textbox"
      value="<? $_POST['fullname']; ?>" size="20" ></td>
      <td width="626" >Salution of Mr. or Mrs. followed by two text strings separated by any number of spaces. </td>
      </tr>

    <tr>
      <th>Street:</th>
      <td><input name="street" type="text" class="textbox"
      value="<? $_POST['street']; ?>" size="30"></td>
      <td >2 or 3 digit number followed by a text string ending with Street or Road separated by any number of spaces. </td>
    <tr>
      <th>Phone:</th>
      <td><input name="phone" type="text" class="textbox"
      value="<? $_POST['phone']; ?>" size="20"></td>

      <td >10 digits, first 3 digits have optional parentheses, either side of digits 456 are optional space, dot or hyphen. </td>
    </tr>
    <tr>
      <th>PostalCode:</th>
      <td><input name="postcode" type="text" class="textbox"
      value="<? $_POST['postcode']; ?>" size="8" maxlength="8"></td>
      <td > Postal Code:
        Char Char Digit Hyphen/space Char Digit Digit (No XYZ or 0's. Case insensitive. )</td>
    </tr>

    <tr>
      <th>Email:</th>
      <td><input name="email" type="text" class="textbox"
      value="<? $_POST['email']; ?>" size="25" maxlength="40"></td>
      <td > Must accept as
        a minimum : a@b.com</td>
     </tr>
  </table>
  <input name="reset" type='button' class="button" value='RESET' onClick="location.href = location.href">

  <input name="_submit" type="submit" class="button" value="Submit me now!!!" >
</form>
<p id="notice">Everything below here is for testing purposes Don't remove this from your lab
  as I will use these buttons to fill your form with good and bad data as I mark
  it.</p>
<script>
az=document.getstuff;
function goodstuff(){
az.fullname.value=" Mr. Joe Smith ";
az.street.value="135 Fennell Road ";
az.phone.value="905-575.1212";
az.postcode.value="Ln9-T23";
az.email.value="jsmith@gov.ca";

}
function goodstuff2(){
az.fullname.value=" Mrs. Josephine Smith ";
az.street.value=" 13  Fennell Street";
az.phone.value=" (905)-575.1212 ";
az.postcode.value=" Ln9 T23";
az.email.value=" jsmith@gov.ca  ";

}
function badstuff(){
az.fullname.value="Miss Josephine Smith";
az.street.value="1 Somewhere Avenue";
az.phone.value="905575122";
az.postcode.value="Z8N 3T2";
az.email.value="jsmith$gov#ca";

}
function badstuff2(){
az.fullname.value=" Joe Smith ";
az.street.value="  1392  Fennell Street";
az.phone.value="[905] 575-1212";
az.postcode.value=" Ly9 T20";
az.email.value=" @jsmith$gov#ca";

}
function goodandbad(){
az.fullname.value="Mrs. Joe";
az.street.value=" 135 Fennell Avenue West";
az.phone.value="905:5751212";
az.postcode.value=" L99-T23";
az.email.value=" jsmith@.gov.ca  ";

}

</script>
<form>
  <input type=button class="button" onClick="goodstuff();" value="Fill form with good values " length=100 >
  <input type=button class="button" onClick="goodstuff2();" value="Fill form with good values 2 " >
 
  <input type=button class="button" onClick="badstuff();" value="Fill form with BAD values ">
  <input type=button class="button" onClick="badstuff2();" value="Fill form with BAD values 2 ">
 
  <input type=button class="button" onClick="goodandbad();" value="Fill form with Good and BAD values 2">

  <br>
</form>


</BODY>
</HTML>

I have a script which creates a Thumbnail image if one does not exists, the problem is i keep getting this error: Catchable fatal error: Object of class SimpleImage could not be converted to string in /homepages/22/d378569747/htdocs/scripts/primary_image.php on line 21 i have checked the logs and i think its a read error because the the image is already in use by the server if i remove

(!file_exists("$root/thumnail_user_images/$image"))


the script work fine,  is there anyway to stop this error occuring?


<?php
//header('Content-Type: image/jpeg');
$root = $_SERVER['DOCUMENT_ROOT'];
require("$root/include/mysqldb.php");                     //mysql login details
require("$root/include/mysql_connect.php");               //mysql connect


$uin = $_GET['uin'];


$result = mysql_query("SELECT * FROM Reg_Profile_images WHERE UIN='$uin' AND `primary` = '1' LIMIT 1");
while($row = mysql_fetch_array( $result )) {

$image = $row[2];


if (!file_exists("$root/thumnail_user_images/$image"))
 {
   require("$root/include/image_resizing_function.php");     //create image
   $image = new SimpleImage();
   $image->load("$root/raw_user_images/$image");
   $image->resizeToWidth(250);
   $image->save("$root/thumnail_user_images/$image");
   $image->output();


}

else {


 readfile("$root/thumnail_user_images/$image");




}
}
//End Image file





?>

Hello,

I'm trying to read the first line of some large files by PHP, which means, the ideal solution does not work:

Quote

   $content = file($file_import);
   
   $fields = explode(",", $content[0]);


Quote

Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 110 bytes) in C:\wamp\www\exchange\admin\import.php on line 55



Is there any other way to read only the first line without opening the whole file?

Thanks!!