dsozqcx9668 2017-12-25 11:23
浏览 22
已采纳

PHP:不上传图片

<?php

if(isset($_POST["submit-post"])){
    $desc = $_POST['description'];
    if (strpos($desc, "'") !== false) {
        $desc = str_replace("'", "_", $desc);
    }
    $sql_home = "INSERT INTO home (description) VALUES ('$desc');";
    if($conn->query($sql_home) === TRUE){ echo "<br>Great!<br>"; }
    else{ echo("<br>Nope!<br> "); }
    $uploaddir = $_SERVER['DOCUMENT_ROOT']. '/imgs/home/';
    $uploadfile = $uploaddir . basename($_FILES['image']['name']);
    if (move_uploaded_file($_FILES['image']['tmp_name'], $uploadfile)) {
        echo "File is valid, and was successfully uploaded. <br>";
    } else {
        echo "Possible file upload attack! <br>";
        echo "$uploadfile <br>";
    }
    echo '<br>Here is some more debugging info: ';
    print_r($_FILES);
    echo "<br>";
    error_reporting(-1); ini_set("display_errors", true); //?
}

?>

Every time I try to upload an image ( .jpg ) it says "Possible file upload attack!". Help. Gives me two warnings:

Warning: move_uploaded_file(/var/www/html/imgs/home/calcetto.jpg): failed to open stream: Permission denied in /var/www/html/admin/db/manage.php on line 199
Warning: move_uploaded_file(): Unable to move '/tmp/phpGvLsAC' to '/var/www/html/imgs/home/calcetto.jpg' in /var/www/html/admin/db/manage.php on line 199

Please note:

  1. I tried both absolute and relative paths;
  2. php.ini: file_uploads = On
  3. I copied and pasted the code from php.net
  4. this file is /var/www/html/admin/db/manage.php
  5. images to upload are here: /var/www/html/imgs/home

Here is the html:

<form action="" method="post" enctype="multipart/form-data">
    <textarea name='description' placeholder='Image description'></textarea><br>
    <input type="file" name="image"><br><br>
    <input type='submit' name='submit-post' value='Upload'></input>
</form>
  • 写回答

1条回答 默认 最新

  • duannuan0074 2017-12-25 12:16
    关注

    I am writing my answer from comments.

    Please check for the errors by PHP error reporting

    just write

    error_reporting(-1);
    ini_set("display_errors", true);
    

    you need to check for permission to the upload directory, if you have subdirectory then you need to have write permission on both of the directories

    you can change the permission by the following commands -R will update the permissions for subdirectories as well

    chmod -R 777 uploaddirectory
    
    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 求帮我调试一下freefem代码
  • ¥15 R语言Rstudio突然无法启动
  • ¥15 关于#matlab#的问题:提取2个图像的变量作为另外一个图像像元的移动量,计算新的位置创建新的图像并提取第二个图像的变量到新的图像
  • ¥15 改算法,照着压缩包里边,参考其他代码封装的格式 写到main函数里
  • ¥15 用windows做服务的同志有吗
  • ¥60 求一个简单的网页(标签-安全|关键词-上传)
  • ¥35 lstm时间序列共享单车预测,loss值优化,参数优化算法
  • ¥15 Python中的request,如何使用ssr节点,通过代理requests网页。本人在泰国,需要用大陆ip才能玩网页游戏,合法合规。
  • ¥100 为什么这个恒流源电路不能恒流?
  • ¥15 有偿求跨组件数据流路径图