---
title: "safe mode???"
type: "forum-thread"
url: "https://www.webforum.nu/amne/php/61071-safe-mode"
topic: "PHP"
topic_url: "https://www.webforum.nu/amne/php"
author: "zipp3r"
published: "2002-12-04T01:31:21.000Z"
updated: "2002-12-06T18:35:26.000Z"
replies: 14
views: 535
page: 1
pages: 1
language: "sv-SE"
site: "webForum — webforum.nu"
rights: "Upphovsrätten till varje inlägg tillhör dess författare."
attribution: "Citera som: webForum, https://www.webforum.nu/amne/php/61071-safe-mode"
---

# safe mode???

## #1 — zipp3r, 2002-12-04T01:31Z

Hej,
jag har ett webhotell som kör safe mode.
detta gör att det blir problem  med fotogalleriet.

hur ska jag göra??

raden som det tydligen berör

$ok = move_uploaded_file($this-\>upload_file, $this-\>upload_path\[$this-\>image_type\]."/".$this-\>file_name);

vet inte om ni behöver se resten av koden också (?)
tack på förhand

Permalänk: https://www.webforum.nu/p/61071

## #2 — dab, 2002-12-05T00:42Z

posta hela koden + felmeddelanden

Permalänk: https://www.webforum.nu/p/876445

## #3 — Batboy, 2002-12-05T08:18Z

<http://www.php.net/manual/en/features.safe-mode.functions.php>

***Functions restricted/disabled by safe mode**

move_uploaded_file()
Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed.*

Permalänk: https://www.webforum.nu/p/876516

## #4 — zipp3r, 2002-12-05T14:36Z

ok här kommer hela koden...

```php
<?php
if (!defined('ROOT_PATH')) {
  die("Security violation");
}

if (!function_exists("is_uploaded_file")) {
  function is_uploaded_file($file_name) {
    if (!$tmp_file = @get_cfg_var('upload_tmp_dir')) {
      $tmp_file = tempnam('','');
      $deleted = @unlink($tmp_file);
      $tmp_file = dirname($tmp_file);
    }
    $tmp_file .= '/'.basename($file_name);
    return (ereg_replace('/+', '/', $tmp_file) == $file_name) ? 1 : 0;
  }

  function move_uploaded_file($file_name, $destination) {
    return (is_uploaded_file($file_name)) ? ((copy($file_name, $destination)) ? 1 : 0) : 0;
  }
}

class Upload {

  var $upload_errors = array();
  var $accepted_mime_types = array();
  var $accepted_extensions = array();
  var $upload_mode = 3;

  var $image_type = "";
  var $max_width = array();
  var $max_height = array();
  var $max_size = array();
  var $upload_path = array();

  var $field_name;
  var $file_name;
  var $extension;

  var $image_size = 0;
  var $image_size_ok = 0;
  var $lang = array();
  var $upload_errors = array();

  function Upload() {
    global $config, $lang;

    $this->max_width['thumb'] = $config['max_thumb_width'];
    $this->max_width['media'] = $config['max_image_width'];
    $this->max_height['thumb'] = $config['max_thumb_height'];
    $this->max_height['media'] = $config['max_image_height'];

    $this->max_size['thumb'] = $config['max_thumb_size'] * 1024;
    $this->max_size['media'] = $config['max_media_size'] * 1024;

    $this->upload_mode = $config['upload_mode'];
    $this->lang = $lang;

    $this->set_allowed_filetypes();
  }

  function check_image_size() {
    $this->image_size = @getimagesize($this->upload_file);
    $ok = 1;
    if ($this->image_size[0] > $this->max_width[$this->image_type]) {
      $ok = 0;
      $this->set_error($this->lang['invalid_image_width']);
    }

    if ($this->image_size[1] > $this->max_height[$this->image_type]) {
      $ok = 0;
      $this->set_error($this->lang['invalid_image_height']);
    }
    return $ok;
  }

  function copy_file() {
    switch ($this->upload_mode) {
    case 1: // overwrite mode
      if (file_exists($this->upload_path[$this->image_type]."/".$this->file_name)) {
        @unlink($this->upload_path[$this->image_type]."/".$this->file_name);
      }
      $ok = move_uploaded_file($this->upload_file, $this->upload_path[$this->image_type]."/".$this->file_name);
      break;
    case 2: // create new with incremental extention
      $n = 2;
      $copy = "";
      while (file_exists($this->upload_path[$this->image_type]."/".$this->name.$copy.".".$this->extension)) {
        $copy = "_".$n;
        $n++;
      }
      $this->file_name = $this->name.$copy.".".$this->extension;
      $ok = move_uploaded_file($this->upload_file, $this->upload_path[$this->image_type]."/".$this->file_name);
      break;
    case 3: // do nothing if exists, highest protection
    default:
      if (file_exists($this->upload_path[$this->image_type]."/".$this->file_name)) {
       $this->set_error($this->lang['file_already_exists']);
       $ok = 0;
      }
      else {
        $ok = move_uploaded_file($this->upload_file, $this->upload_path[$this->image_type]."/".$this->file_name);
      }
      break;
    }
    @chmod($this->upload_path[$this->image_type]."/".$this->file_name, CHMOD_FILES);
    return $ok;
  }

  function check_max_filesize() {
    if ($this->HTTP_POST_FILES[$this->field_name]['size'] > $this->max_size[$this->image_type]) {
      return false;
    }
    else {
      return true;
    }
  }

  function save_file() {
    global $user_info;

    $this->upload_file = $this->HTTP_POST_FILES[$this->field_name]['tmp_name'];
    $ok = 1;
    if (empty($this->upload_file) || $this->upload_file == "none") {
      $this->set_error($this->lang['no_image_file']);
      $ok = 0;
    }

    if ($user_info['user_level'] != ADMIN) {
      if (!$this->check_max_filesize()) {
        $this->set_error($this->lang['invalid_file_size']);
        $ok = 0;
      }
      if (eregi("image", $this->HTTP_POST_FILES[$this->field_name]['type'])) {
        if (!$this->check_image_size()) {
          $ok = 0;
        }
      }
    }

    if (!$this->check_file_extension() || !$this->check_mime_type()) {
      $this->set_error($this->lang['invalid_file_type']. " (".$this->extension.", ".$this->mime_type.")");
      $ok = 0;
    }
    if ($ok) {
      if (!$this->copy_file()) {
        if (isset($this->lang['file_copy_error'])) {
          $this->set_error($this->lang['file_copy_error']);
        }
        $ok = 0;
      }
    }
    return $ok;
  }

  function upload_file($field_name, $image_type, $cat_id = 0, $file_name = "") {
    global $HTTP_COOKIE_VARS, $HTTP_POST_VARS, $HTTP_GET_VARS, $HTTP_POST_FILES;

    // Bugfix for: [url]http://www.securityfocus.com/archive/1/80106[/url]
    if (isset($HTTP_COOKIE_VARS[$field_name]) || isset($HTTP_POST_VARS  [$field_name]) || isset($HTTP_GET_VARS   [$field_name])) {
      die("Security violation");
    }

    $this->HTTP_POST_FILES = $HTTP_POST_FILES;
    $this->image_type = $image_type;
    $this->field_name = $field_name;

    if ($cat_id) {
      $this->upload_path['thumb'] = THUMB_PATH."/".$cat_id;
      $this->upload_path['media'] = MEDIA_PATH."/".$cat_id;
    }
    else {
      $this->upload_path['thumb'] = THUMB_TEMP_PATH;
      $this->upload_path['media'] = MEDIA_TEMP_PATH;
    }

    if ($file_name != "") {
      ereg("(.+)\.(.+)", $file_name, $regs);
      $this->name = $regs[1];
      ereg("(.+)\.(.+)", $this->HTTP_POST_FILES[$this->field_name]['name'], $regs);
      $this->extension = $regs[2];
      $this->file_name = $this->name.".".$this->extension ;
    }
    else {
      $this->file_name = $this->HTTP_POST_FILES[$this->field_name]['name'];
      $this->file_name = ereg_replace(" ", "_", $this->file_name);
      $this->file_name = ereg_replace("%20", "_", $this->file_name);
      $this->file_name = preg_replace("/[^-\._a-zA-Z0-9]/", "", $this->file_name);

      ereg("(.+)\.(.+)", $this->file_name, $regs);
      $this->name = $regs[1];
      $this->extension = $regs[2];
    }

    $this->mime_type = $this->HTTP_POST_FILES[$this->field_name]['type'];
    preg_match("/([a-z]+\/[a-z\-]+)/", $this->mime_type, $this->mime_type);
    $this->mime_type = $this->mime_type[1];

    if ($this->save_file()) {
      return $this->file_name;
    }
    else {
      return false;
    }
  }

  function check_file_extension($extension = "") {
    if ($extension == "") {
      $extension = $this->extension;
    }
    if (!in_array(strtolower($extension), $this->accepted_extensions[$this->image_type])) {
      return false;
    }
    else {
      return true;
    }
  }

  function check_mime_type() {
    if (!isset($this->accepted_mime_types[$this->image_type])) {
      return true;
    }
    if (!in_array($this->mime_type, $this->accepted_mime_types[$this->image_type])) {
      return false;
    }
    else {
      return true;
    }
  }

  function set_allowed_filetypes() {
    global $config;
    //Thumbnails
    $this->accepted_mime_types['thumb'] = array(
      "image/jpeg",
      "image/pjpeg",
      "image/gif",
      "image/x-png"
    );
    $this->accepted_extensions['thumb'] = array(
      "jpg",
      "jpeg",
      "gif",
      "png"
    );

    //Media
    $this->accepted_extensions['media'] = $config['allowed_mediatypes_array'];

    $mime_type_match = array();
    include(ROOT_PATH.'includes/upload_definitions.php');

    foreach ($mime_type_match as $key => $val) {
      if (in_array($key, $this->accepted_extensions['media'])) {
        if (is_array($val)) {
          foreach ($val as $key2 => $val2) {
            $this->accepted_mime_types['media'][] = $val2;
          }
        }
        else {
          $this->accepted_mime_types['media'][] = $val;
        }
      }
    }
  }

  function get_upload_errors() {
    if (empty($this->upload_errors[$this->file_name])) {
      return "";
    }
    $error_msg = "";
    foreach ($this->upload_errors[$this->file_name] as $msg) {
      $error_msg .= "<b>".$this->file_name.":</b> ".$msg."<br />";
    }
    return $error_msg;
  }

  function set_error($error_msg) {
    $this->upload_errors[$this->file_name][] = $error_msg;
  }
} //end of class
?>
```

Permalänk: https://www.webforum.nu/p/876768

## #5 — zipp3r, 2002-12-05T14:38Z

felmeddelande...

här är felmeddelandet

Warning: SAFE MODE Restriction in effect. The script whose uid is 1783 is not allowed to access /export/vol2/unix/z/zipper/public_html/4images/data/media/5 owned by uid 501 in /export/vol2/unix/z/zipper/public_html/4images/includes/upload.php on line 114

skulle vara riktigt glad ifall jag fick hjälp...

Permalänk: https://www.webforum.nu/p/876770

## #6 — Batboy, 2002-12-05T17:29Z

> **zipp3r skrev:**
>
> skulle vara riktigt glad ifall jag fick hjälp...

Byt webbhotell till ett som inte använder safe mode.

Permalänk: https://www.webforum.nu/p/876892

## #7 — zipp3r, 2002-12-05T18:08Z

batboy, jag har haft 24-7webhosting och nu har jag bytt till shell.linux.se så ett webhotell byte har jag inte råd till, men jag har läst att det ska finnas ngt sätt att gå förbi det här?

Permalänk: https://www.webforum.nu/p/876916

## #8 — Batboy, 2002-12-05T21:54Z

Jag har inget bra svar, Google kanske vet.
<http://www.google.com/search?hl=en&q=php+safe+mode+file+upload>

Permalänk: https://www.webforum.nu/p/877039

## #9 — dab, 2002-12-06T00:10Z

kollade lite på koden men jag hajade inte så mycket
men en sak jag lyfte ögonbryna åt var detta:

\__function_move_uploaded_file($file_name,\_$destination)\_{

\____return\_(is_uploaded_file($file_name))\_?\_((copy($file_name,\_$destination))\_?\_1\_:\_0)\_:\_0;

\_\_}

Testa att ta bort den funktionen, så php använder sin egen inbyggda. Ingen aning om det hjälper dock...

Permalänk: https://www.webforum.nu/p/877090

## #10 — zipp3r, 2002-12-06T13:09Z

hmm. testat lite av varje,

dab, ditt också tyvvär funkade det inte...

såg på google om att lägga in en .htaccess fil också men nej.

fan va trist...
å det var egentligen anledningen till att jag bytte webhotell...
nästa gång ska jag nog kolla upp ordentligt :-/

Permalänk: https://www.webforum.nu/p/877432

## #11 — dab, 2002-12-06T16:50Z

fast har inte 24-7 också safemode=on?

Permalänk: https://www.webforum.nu/p/877598

## #12 — zipp3r, 2002-12-06T17:04Z

jepp, det gör dom, det var därför jag bytte ;)
tyvvär var jag så j-vla dum så jag inte kollade upp det innan.

dock såtr det på deras hemsida att man ska kunna ladda upp filer på ett annat sätt, så har dom en kodsnutt där...
men har inte förstått mej på den rikgigt också testat utan  framgång.

Permalänk: https://www.webforum.nu/p/877600

## #13 — dab, 2002-12-06T17:35Z

jag fick det att funka med den kodsnutten just på 24-7

Permalänk: https://www.webforum.nu/p/877618

## #14 — zipp3r, 2002-12-06T18:13Z

ja det kan hända, vet du varför?

men jag bytte eftersom att tio mb inte räcker så långt till ett fotoalbum, +att ska jag ha mera utrymme blir det så j-vla dyrt.
dom är hyffsat bra me också dyra!

Permalänk: https://www.webforum.nu/p/877638

## #15 — dab, 2002-12-06T18:35Z

nope, ledsen ingen aning

Permalänk: https://www.webforum.nu/p/877655

---

Tråden på webben: https://www.webforum.nu/amne/php/61071-safe-mode