如何在当前目录之外创建目录？

Question

I'm trying to create a secure way to handle file uploads by uploading the files to a directory outside of public_html.

I'm testing my script and my script works when I execute sudo php receive_files.php, but when I run receive_files.php without sudo I get failed to open stream: Permission denied.

Right now all permissions all the way back to var/www/html/mysite/public_html are set to 755. I tried changing all of them to 775 and the command still didn't work Without sudo. And I'm pretty sure that would not be secure. How do I get around this problem?

My code:

$encoded_file = $_POST['file'];
$user_id = $_POST['user_id'];
$decoded_file = base64_decode($encoded_file);

$new_directory = "../../../../../../user_uploads/$user_id/";

if(!file_exists($new_directory)){
    mkdir($new_directory, 0775, true);
    file_put_contents($new_directory . $decoded_file);
}

Answer 1

Sudo is required when you are not the owner of something or you try to change permissions. So if you want php script to have access to upper directory. Change the group or user owner of upper directory same as php executor, in most cases its www-data

You can check owner of php script by using

ls -al

Then change owner using

chown -hR www-data:www-data directorypath

For more detail check manual of chown command

This will most probably fix your issue

Additional info

specifying absolute path instead of relative path solved the issue