14 svar · 528 visningar · startad av zipp3r
Hej,
jag har ett webhotell som kör safe mode.
detta gör att det blir problem med fotogalleriet.
hur ska jag göra??
raden som det tydligen berör
$ok = move_uploaded_file($this->upload_file, $this->upload_path[$this->image_type]."/".$this->file_name);
vet inte om ni behöver se resten av koden också (?)
tack på förhand
posta hela koden + felmeddelanden
http://www.php.net/manual/en/features.safe-mode.functions.php
*Functions restricted/disabled by safe mode
move_uploaded_file()
Checks whether the files or directories you are about to operate on have the same UID (owner) as the script that is being executed.*
ok här kommer hela koden...
<?php
if (!defined('ROOT_PATH')) {
die("Security violation");
}
if (!function_exists("is_uploaded_file")) {
function is_uploaded_file($file_name) {
if (!$tmp_file = @get_cfg_var('upload_tmp_dir')) {
$tmp_file = tempnam('','');
$deleted = @unlink($tmp_file);
$tmp_file = dirname($tmp_file);
}
$tmp_file .= '/'.basename($file_name);
return (ereg_replace('/+', '/', $tmp_file) == $file_name) ? 1 : 0;
}
function move_uploaded_file($file_name, $destination) {
return (is_uploaded_file($file_name)) ? ((copy($file_name, $destination)) ? 1 : 0) : 0;
}
}
class Upload {
var $upload_errors = array();
var $accepted_mime_types = array();
var $accepted_extensions = array();
var $upload_mode = 3;
var $image_type = "";
var $max_width = array();
var $max_height = array();
var $max_size = array();
var $upload_path = array();
var $field_name;
var $file_name;
var $extension;
var $image_size = 0;
var $image_size_ok = 0;
var $lang = array();
var $upload_errors = array();
function Upload() {
global $config, $lang;
$this->max_width['thumb'] = $config['max_thumb_width'];
$this->max_width['media'] = $config['max_image_width'];
$this->max_height['thumb'] = $config['max_thumb_height'];
$this->max_height['media'] = $config['max_image_height'];
$this->max_size['thumb'] = $config['max_thumb_size'] * 1024;
$this->max_size['media'] = $config['max_media_size'] * 1024;
$this->upload_mode = $config['upload_mode'];
$this->lang = $lang;
$this->set_allowed_filetypes();
}
function check_image_size() {
$this->image_size = @getimagesize($this->upload_file);
$ok = 1;
if ($this->image_size[0] > $this->max_width[$this->image_type]) {
$ok = 0;
$this->set_error($this->lang['invalid_image_width']);
}
if ($this->image_size[1] > $this->max_height[$this->image_type]) {
$ok = 0;
$this->set_error($this->lang['invalid_image_height']);
}
return $ok;
}
function copy_file() {
switch ($this->upload_mode) {
case 1: // overwrite mode
if (file_exists($this->upload_path[$this->image_type]."/".$this->file_name)) {
@unlink($this->upload_path[$this->image_type]."/".$this->file_name);
}
$ok = move_uploaded_file($this->upload_file, $this->upload_path[$this->image_type]."/".$this->file_name);
break;
case 2: // create new with incremental extention
$n = 2;
$copy = "";
while (file_exists($this->upload_path[$this->image_type]."/".$this->name.$copy.".".$this->extension)) {
$copy = "_".$n;
$n++;
}
$this->file_name = $this->name.$copy.".".$this->extension;
$ok = move_uploaded_file($this->upload_file, $this->upload_path[$this->image_type]."/".$this->file_name);
break;
case 3: // do nothing if exists, highest protection
default:
if (file_exists($this->upload_path[$this->image_type]."/".$this->file_name)) {
$this->set_error($this->lang['file_already_exists']);
$ok = 0;
}
else {
$ok = move_uploaded_file($this->upload_file, $this->upload_path[$this->image_type]."/".$this->file_name);
}
break;
}
@chmod($this->upload_path[$this->image_type]."/".$this->file_name, CHMOD_FILES);
return $ok;
}
function check_max_filesize() {
if ($this->HTTP_POST_FILES[$this->field_name]['size'] > $this->max_size[$this->image_type]) {
return false;
}
else {
return true;
}
}
function save_file() {
global $user_info;
$this->upload_file = $this->HTTP_POST_FILES[$this->field_name]['tmp_name'];
$ok = 1;
if (empty($this->upload_file) || $this->upload_file == "none") {
$this->set_error($this->lang['no_image_file']);
$ok = 0;
}
if ($user_info['user_level'] != ADMIN) {
if (!$this->check_max_filesize()) {
$this->set_error($this->lang['invalid_file_size']);
$ok = 0;
}
if (eregi("image", $this->HTTP_POST_FILES[$this->field_name]['type'])) {
if (!$this->check_image_size()) {
$ok = 0;
}
}
}
if (!$this->check_file_extension() || !$this->check_mime_type()) {
$this->set_error($this->lang['invalid_file_type']. " (".$this->extension.", ".$this->mime_type.")");
$ok = 0;
}
if ($ok) {
if (!$this->copy_file()) {
if (isset($this->lang['file_copy_error'])) {
$this->set_error($this->lang['file_copy_error']);
}
$ok = 0;
}
}
return $ok;
}
function upload_file($field_name, $image_type, $cat_id = 0, $file_name = "") {
global $HTTP_COOKIE_VARS, $HTTP_POST_VARS, $HTTP_GET_VARS, $HTTP_POST_FILES;
// Bugfix for: [url]http://www.securityfocus.com/archive/1/80106[/url]
if (isset($HTTP_COOKIE_VARS[$field_name]) || isset($HTTP_POST_VARS [$field_name]) || isset($HTTP_GET_VARS [$field_name])) {
die("Security violation");
}
$this->HTTP_POST_FILES = $HTTP_POST_FILES;
$this->image_type = $image_type;
$this->field_name = $field_name;
if ($cat_id) {
$this->upload_path['thumb'] = THUMB_PATH."/".$cat_id;
$this->upload_path['media'] = MEDIA_PATH."/".$cat_id;
}
else {
$this->upload_path['thumb'] = THUMB_TEMP_PATH;
$this->upload_path['media'] = MEDIA_TEMP_PATH;
}
if ($file_name != "") {
ereg("(.+)\.(.+)", $file_name, $regs);
$this->name = $regs[1];
ereg("(.+)\.(.+)", $this->HTTP_POST_FILES[$this->field_name]['name'], $regs);
$this->extension = $regs[2];
$this->file_name = $this->name.".".$this->extension ;
}
else {
$this->file_name = $this->HTTP_POST_FILES[$this->field_name]['name'];
$this->file_name = ereg_replace(" ", "_", $this->file_name);
$this->file_name = ereg_replace("%20", "_", $this->file_name);
$this->file_name = preg_replace("/[^-\._a-zA-Z0-9]/", "", $this->file_name);
ereg("(.+)\.(.+)", $this->file_name, $regs);
$this->name = $regs[1];
$this->extension = $regs[2];
}
$this->mime_type = $this->HTTP_POST_FILES[$this->field_name]['type'];
preg_match("/([a-z]+\/[a-z\-]+)/", $this->mime_type, $this->mime_type);
$this->mime_type = $this->mime_type[1];
if ($this->save_file()) {
return $this->file_name;
}
else {
return false;
}
}
function check_file_extension($extension = "") {
if ($extension == "") {
$extension = $this->extension;
}
if (!in_array(strtolower($extension), $this->accepted_extensions[$this->image_type])) {
return false;
}
else {
return true;
}
}
function check_mime_type() {
if (!isset($this->accepted_mime_types[$this->image_type])) {
return true;
}
if (!in_array($this->mime_type, $this->accepted_mime_types[$this->image_type])) {
return false;
}
else {
return true;
}
}
function set_allowed_filetypes() {
global $config;
//Thumbnails
$this->accepted_mime_types['thumb'] = array(
"image/jpeg",
"image/pjpeg",
"image/gif",
"image/x-png"
);
$this->accepted_extensions['thumb'] = array(
"jpg",
"jpeg",
"gif",
"png"
);
//Media
$this->accepted_extensions['media'] = $config['allowed_mediatypes_array'];
$mime_type_match = array();
include(ROOT_PATH.'includes/upload_definitions.php');
foreach ($mime_type_match as $key => $val) {
if (in_array($key, $this->accepted_extensions['media'])) {
if (is_array($val)) {
foreach ($val as $key2 => $val2) {
$this->accepted_mime_types['media'][] = $val2;
}
}
else {
$this->accepted_mime_types['media'][] = $val;
}
}
}
}
function get_upload_errors() {
if (empty($this->upload_errors[$this->file_name])) {
return "";
}
$error_msg = "";
foreach ($this->upload_errors[$this->file_name] as $msg) {
$error_msg .= "<b>".$this->file_name.":</b> ".$msg."<br />";
}
return $error_msg;
}
function set_error($error_msg) {
$this->upload_errors[$this->file_name][] = $error_msg;
}
} //end of class
?>
felmeddelande...
här är felmeddelandet
Warning: SAFE MODE Restriction in effect. The script whose uid is 1783 is not allowed to access /export/vol2/unix/z/zipper/public_html/4images/data/media/5 owned by uid 501 in /export/vol2/unix/z/zipper/public_html/4images/includes/upload.php on line 114
skulle vara riktigt glad ifall jag fick hjälp...
zipp3r skrev:
skulle vara riktigt glad ifall jag fick hjälp...
Byt webbhotell till ett som inte använder safe mode.
batboy, jag har haft 24-7webhosting och nu har jag bytt till shell.linux.se så ett webhotell byte har jag inte råd till, men jag har läst att det ska finnas ngt sätt att gå förbi det här?
Jag har inget bra svar, Google kanske vet.
http://www.google.com/search?hl=en&q=php+safe+mode+file+upload
kollade lite på koden men jag hajade inte så mycket
men en sak jag lyfte ögonbryna åt var detta:
__function_move_uploaded_file($file_name,_$destination)_{
____return_(is_uploaded_file($file_name))_?_((copy($file_name,_$destination))_?_1_:_0)_:_0;
__}
Testa att ta bort den funktionen, så php använder sin egen inbyggda. Ingen aning om det hjälper dock...
hmm. testat lite av varje,
dab, ditt också tyvvär funkade det inte...
såg på google om att lägga in en .htaccess fil också men nej.
fan va trist...
å det var egentligen anledningen till att jag bytte webhotell...
nästa gång ska jag nog kolla upp ordentligt :-/
fast har inte 24-7 också safemode=on?
jepp, det gör dom, det var därför jag bytte ;)
tyvvär var jag så j-vla dum så jag inte kollade upp det innan.
dock såtr det på deras hemsida att man ska kunna ladda upp filer på ett annat sätt, så har dom en kodsnutt där...
men har inte förstått mej på den rikgigt också testat utan framgång.
jag fick det att funka med den kodsnutten just på 24-7
ja det kan hända, vet du varför?
men jag bytte eftersom att tio mb inte räcker så långt till ett fotoalbum, +att ska jag ha mera utrymme blir det så j-vla dyrt.
dom är hyffsat bra me också dyra!
nope, ledsen ingen aning