php-thttpd è çàãðóçêà ôàéëîâ

[Pasechnick]

Çäðàâñòâóéòå,
Ðåøèë ïðèäåëàòü ê ñàéòó çàãðóçêó ôàéëîâ.
Îòêðîâåííî ãîâîðÿ, â ïõï ÿ íè ÷åðòà íå ïîíèìàþ =)
Âçÿë ïðîñòåíüêèé ñêðèïò.


<?php

$uploaddir = '/opt/share/www/***/arch/';
$uploadfile = $uploaddir . basename($_FILES['userfile']['name']);

echo '<pre>';
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
echo "File is valid, and was successfully uploaded.\n";
} else {
echo "Possible file upload attack!\n";
}

echo 'Here is some more debugging info:';
print_r($_FILES);

print "</pre>";

?>

Êàê âèäíî, ñîçäàë ïàïêó arch. Ÿ ñäåëàë 0777.
 ïõï.èíè ñäåëàë âðåìåííóþ äëÿ çàãðóçîê ôàéëîâ /tmp. Ïðîáîâàë è äóãèå (/opt/tmp).
Ïîñëå íàæàòèÿ íà êíîïêó çàãðóçêè ïîÿâëÿåòñÿ ïóñòîå îêíî.
Ôàéëû íå çàãðóæàþòñÿ.
Îáúÿñíèòå, ïîæàëóéñòà, ãäå è ïî÷åìó?
Óæå òðåòèé äåíü âîæóñü.

[Pasechnick]

Ïîñòàâèë lighttpd çàìåñòî thttpd.
Òåïåðü ñòàëî ëó÷øå, íî ïî ïðåæíåìó íå ðàáîòàåò.

Possible file upload attack!
Here is some more debugging info:Array
(
[uploadfile] => Array
(
[name] => macosxlogo.gif
[type] => image/gif
[tmp_name] => /tmp/phpnfWd95
[error] => 0
[size] => 2829
)

)

[Mam(O)n]

Ýòîò âîïðîñ âûõîäèò çà ðàìêè ýòîãî ôîðóìà...

Íî âñå æå. Ó òåáÿ â ôîðìå íàâåðíîå <input name="uploadfile" à íå userfile. Òîãäà:


<?php

$uploaddir = '/opt/share/www/t.wroom.thruhere.net/arch/';
$uploadfile = $uploaddir . basename($_FILES['uploadfile']['name']);

echo '<pre>';
if (move_uploaded_file($_FILES['uploadfile']['tmp_name'], $uploadfile)) {
echo "File is valid, and was successfully uploaded.\n";
} else {
echo "Possible file upload attack!\n";
}

echo 'Here is some more debugging info:';
print_r($_FILES);

print "</pre>";

?>

[Pasechnick]

ñïàñèáî îãðîìíîå!
÷òî-òî ãëóï ÿ áîëüíî =)