hvad er fejlen.. http upload

først, så spørg lige om der er submittet, isset()
dernæst, så definer den stien hvortil filen skal flyttes uden at bruge domænenavn

fileuploads er sat til 1, så det skulle være mulgit at uploade :O)

prøv sådan istedet...

$uploadfile = $_FILES['userfile']['tmp_name'];
$uploaddir = $_SERVER['DOCUMENT_ROOT'] . '/path/to your dir/' . $_FILES['userfile']['name'];

print "<pre>";
if (move_uploaded_file($uploadfile, $uploaddir)) {
  print "File is valid, and was successfully uploaded.  Here's some more debugging info:\n";
  print_r($_FILES);
} else {
  print "Possible file upload attack!  Here's some debugging info:\n";
  print_r($_FILES);
}

aslan :) Den går ikke...

http://www.peet.dk/mailform/mailform1.php

dvs.

<?php
$uploadfile = $_FILES['userfile']['tmp_name'];
$uploaddir = $_SERVER['DOCUMENT_ROOT'] . 'http://www.peet.dk/mailform/mailform.php' . $_FILES['userfile']['name'];

print "<pre>";
if (move_uploaded_file($uploadfile, $uploaddir)) {
  print "File is valid, and was successfully uploaded.  Here's some more debugging info:\n";
  print_r($_FILES);
} else {
  print "Possible file upload attack!  Here's some debugging info:\n";
  print_r($_FILES);
}
?>

hmm.. nu har jeg prøvet

http://www.peet.dk/mailform/mailform.php

<form enctype="multipart/form-data" action="http://www.peet.dk/mailform/mailform.php" method="post">
<input type="hidden" name="MAX_FILE_SIZE" value="1000">
Send this file: <input name="userfile" type="file">
<input type="submit" value="Send File">
</form>

<?php
move_uploaded_file($_FILES['userfile']['tmp_name'].
$_SERVER['DOCUMENT_ROOT'],"mailform/".$_FILES['userfile']['tmp_name'])
?>

<?php
$uploadfile = $_FILES['userfile']['tmp_name'];
$uploaddir = $_SERVER['DOCUMENT_ROOT'] . 'http://www.peet.dk/mailform/mailform.php' . $_FILES['userfile']['name'];

print "<pre>";
if (move_uploaded_file($uploadfile, $uploaddir)) {
  print "File is valid, and was successfully uploaded.  Here's some more debugging info:\n";
  print_r($_FILES);
} else {
  print "Possible file upload attack!  Here's some debugging info:\n";
  print_r($_FILES);
}
?>

Og nu skal jeg da love for den skriver noget :) Kan i bruge det til noget, eller skal jeg bare gå tilbage til aslan's udgangs punkt?

WEEII jeg har fået det til at virke..
:D
<form enctype="multipart/form-data" action="/mailform/mailform2.php" method="post">
<input type="hidden" name="MAX_FILE_SIZE" value="1000">
Send this file: <input name="userfile" type="file">
<input type="submit" value="Send File">
</form>

<?php
move_uploaded_file($_FILES['userfile']['tmp_name'].
$_SERVER['DOCUMENT_ROOT'],"mailform/".$_FILES['userfile']['tmp_name'])
?>

<?php
$uploadfile = $_FILES['userfile']['tmp_name'];
$uploaddir = $_SERVER['DOCUMENT_ROOT'] . '/mailform/' . $_FILES['userfile']['name'];

print "<pre>";
if (move_uploaded_file($uploadfile, $uploaddir)) {
  print "File is valid, and was successfully uploaded.  Here's some more debugging info:\n";
  print_r($_FILES);
} else {
  print "Possible file upload attack!  Here's some debugging info:\n";
  print_r($_FILES);
}
?>

WEEII det virker nu :D

<form enctype="multipart/form-data" action="/mailform/mailform2.php" method="post">
<input type="hidden" name="MAX_FILE_SIZE" value="1000">
Send this file: <input name="userfile" type="file">
<input type="submit" value="Send File">
</form>

<?php
move_uploaded_file($_FILES['userfile']['tmp_name'].
$_SERVER['DOCUMENT_ROOT'],"mailform/".$_FILES['userfile']['tmp_name'])
?>

<?php
$uploadfile = $_FILES['userfile']['tmp_name'];
$uploaddir = $_SERVER['DOCUMENT_ROOT'] . '/mailform/' . $_FILES['userfile']['name'];

print "<pre>";
if (move_uploaded_file($uploadfile, $uploaddir)) {
  print "File is valid, and was successfully uploaded.  Here's some more debugging info:\n";
  print_r($_FILES);
} else {
  print "Possible file upload attack!  Here's some debugging info:\n";
  print_r($_FILES);
}
?>

hmm.. er vist træt.. det er virker da vist ikke helt endnu... http://www.peet.dk/mailform/mailform2.php

ok, nu skulle den være der...

<form enctype="multipart/form-data" action="/mailform/mailform3.php" method="post">
<input type="hidden" name="MAX_FILE_SIZE" value="30000">
Send this file: <input name="userfile" type="file">
<input type="submit" value="Send File">
</form>


<?php

$uploadfile = $_FILES['userfile']['tmp_name'];
$uploaddir = $_SERVER['DOCUMENT_ROOT'] . '/mailform/' . $_FILES['userfile']['name'];

print "<pre>";
if (move_uploaded_file($uploadfile, $uploaddir)) {
  print "File is valid, and was successfully uploaded.  Here's some more debugging info:\n";
  print_r($_FILES);
} else {
  print "Possible file upload attack!  Here's some debugging info:\n";
  print_r($_FILES);
}
?>

Efter lidt læsning på http://uk.php.net/manual/sv/printwn/features.file-upload.php#AEN6169 gik der et lys på ;)

Det sidste script du har sendt - er det som fungerer? =)

yep