|
|
Posted by ED on 07/03/07 20:46
"up2trouble" <lynettesmith@gmail.com> wrote in message
news:1183491626.090935.251560@w5g2000hsg.googlegroups.com...
> error:
>
> Warning: chmod() [function.chmod]: open_basedir restriction in effect.
> File(/documentslynne3.gif) is not within the allowed path(s): (/home/
> lynettes:/usr/lib/php:/usr/local/lib/php:/tmp) in /home/lynettes/
> public_html/bainbridge/documents.php on line 29
>
> code:
>
> <?PHP
> if(isset($_POST['upload_file']))
> {
> $uploaddir = "/documents";
> $user = $_POST['user'];
> $name = $_POST['name'];
> $category = $_POST['category'];
> $type = $_POST['type'];
> //$uploadedfile = $_POST['uploadedfile'];
>
> $file_name = $_FILES['uploadedfile']['name'];
> $file_tmp_name = $_FILES['uploadedfile']['tmp_name'];
> $file_name = stripslashes($file_name);
> $file_name = preg_replace("#[ ]#","_",$file_name); // change spaces
> to underscore
> $file_name = preg_replace('#[^()\.\-,\w]#','_',$file_name); //only
> parenthesis, underscore, letters, numbers, comma, hyphen, period -
> others to underscore
> $file_name = preg_replace('#(_)+#','_',$file_name); //eliminate
> duplicate underscore
>
> //move_uploaded_file($file_tmp_name, "$uploaddir$file_name";
> chmod("$uploaddir$file_name", 0644);
>
> $sql5 = "INSERT INTO $db_table5 (user, name, category, type) VALUES
> ('$user','$name', '$category', '$type')";
> mysql_query ($sql5) or die(mysql_error());
> }
> ?>
>
> <FORM ACTION="documents.php" METHOD="post" ENCTYPE="multipart/form-
> data">
> <TABLE CELLSPACING="2" CELLPADDING="2" BORDER="0">
> <TR>
> <TD CLASS='title'>Posted By:</TD>
> <TD><INPUT TYPE="text" NAME="user" SIZE="35" MAXLENGTH="25"></TD>
> </TR>
> <TR>
> <TD CLASS='title'>File Name:</TD>
> <TD><INPUT TYPE="text" NAME="name" SIZE="35" MAXLENGTH="50"></TD>
> </TR>
> <TR>
> <TD CLASS='title'>Category:</TD>
> <TD>
> <SELECT NAME='category'>
> <OPTION VALUE='0' SELECTED>--- Select Category ---</OPTION>
> <?PHP
> $sql = "SELECT * FROM $db_table6 ORDER BY name";
> $result = mysql_query ($sql, $connect) or die ('Query failed:
> ' .mysql_error());
> while ($row = mysql_fetch_array ($result))
> {
> $id = $row["id"];
> $name = $row["name"];
> echo "<OPTION VALUE='$id'>$name</OPTION>";
> }
> ?>
> </SELECT>
> </TD>
> </TR>
> <TR>
> <TD CLASS='title'>Type:</TD>
> <TD>
> <SELECT NAME="type" SIZE="1">
> <OPTION VALUE='0' SELECTED>--- Select Type ---</OPTION>
> <OPTION VALUE="pdf">pdf</OPTION>
> <OPTION VALUE="doc">doc</OPTION>
> </SELECT>
> </TD>
> </TR>
> <TR>
> <TD CLASS='title'>File:</TD>
> <TD>
> <INPUT TYPE="file" NAME="uploadedfile" SIZE="35">
> </TD>
> </TR>
> <TR>
> <TD COLSPAN="2">
> <BR>
> <INPUT TYPE="submit" NAME="upload_file" VALUE="Upload Document">
> </TD>
> </TR>
> </TABLE>
>
hi Lynette,
try:
$uploaddir = "/documents/";
You forgot the trailing slash...
cheers
ED
[Back to original message]
|