file upload - register_globals is deactivated - plz help 1

[Spidy6123]

Hey guys,

I'm using the following code to upload files to a server and it doesn't seem to be working correctly. You should know that register_globals is deactivated... I'm not sure, but I think that might be preventing this script from working... I was hoping there was something I can do with this to make it work..

Thanks guys, any advice is appreciated.

HTML

<form enctype="multipart/form-data" action="upload.php" method="POST">
    <!-- MAX_FILE_SIZE must precede the file input field -->
    <input type="hidden" name="MAX_FILE_SIZE" value="30000" />
    <!-- Name of input element determines name in $_FILES array -->
    Send this file: <input name="userfile" type="file" />
    <input type="submit" value="Send File" />
</form>

PHP

<?php
// In PHP versions earlier than 4.1.0, $HTTP_POST_FILES should be used instead
// of $_FILES.

$uploaddir = '/public_html/uploads/';
$uploadfile = $uploaddir . basename($_FILES['userfile']['name']);

echo '<pre>';
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
   echo "File is valid, and was successfully uploaded.\n";
} else {
   echo "Possible file upload attack!\n";
}

echo 'Here is some more debugging info:';
print_r($_FILES);

print "</pre>";

?>

OUTPUT

Possible file upload attack!
Here is some more debugging info:Array
(
    [userfile] => Array
        (
            [name] => image.jpg
            [type] => 
            [tmp_name] => 
            [error] => 2
            [size] => 0
        )

)

 

[jpadie]

c'mon..... little bit of self help needed here.

you downloaded the sample code from the php manual
(

http://fr2.php.net/manual/en/features.file-upload.php)

you can see that the output has given you an error code (of 2) and in the page from which you have downloaded the code there is a link to what the errors mean
(

http://fr2.php.net/manual/en/features.file-upload.errors.php)

in this case you have attempted to upload a file that is larger in size than 30000 bytes (the MAX_FILE_SIZE hidden input box)

 

[Spidy6123]

oh

thanks for you trouble...

 

[jpadie]

no problem.

remember that the file upload limiter field is measured in bytes. so if you want to handle up to 10MB (say) you need to set the value to 10485760

remember also to ensure that the value in php.ini for uploaded file size and max post data are adequate for your needs.