Solved

PHP/Apache Permission Problem?

Posted on 2006-11-18
4
302 Views
Last Modified: 2006-11-21
I'm using the script below, database settings were definately set correctly, their removed now for security. Are there any modifications I need to make to user permissions for this script to work correctly. Keep in mind it must be able to move a file using "rename". This is running on Fedora 6 with apache. This was working fine on another apache server (godaddy).


<html>
<body>
<?php


//
// Variables
//
$dbServer = "";
$dbuser = "";
$dbpass = "";
$dbDatabase = "imgsrv";
$dbTable = "imagetable";
$dbAliasImgName = "imageName";      //name of field for image name in your database
$dbAliasImgSize = "imageSize";      //name of field for image size
$dbAliasMD5 = "MD5";
$dbAliasAnswer = "Answer";
$dbAliasAgent = "Agent";
$dbAliasIP = "IP";
$currentDir = getcwd();
$uploadDir = "/Images";
$ipaddr = $HTTP_SERVER_VARS["REMOTE_ADDR"];


?>

 <!-- The data encoding type, enctype, MUST be specified as below -->
          <HEAD>

<meta http-equiv="pragma" content="no-cache">
<meta http-equiv="expires" content="0">



<form action="randomimage.php" name=addanswer method="POST">


</HEAD>
<link href="css/Style1.css" rel="stylesheet" type="text/css" />
<BODY onload="document.addanswer.Answer.focus();" >

   
    <table border = 1>
    <td>Add Answer</td><tr align =top>
   <td>


<?php


/* Customise this line to change to your images folder */
$dir = 'Images/unanswered/';
$dh = opendir($dir);
/* The following loop scans the directory specified ignoring folders and Thumbs.db */
while (false !== ($filename = readdir($dh))) {
if($filename == "Thumbs.db" || is_dir($filename)){
}else{
$files[] = $filename;
}
}
closedir($dh);

/* Generate a random number */
$nooffildi = count($files);
$nooffiles = ($nooffildi-1);
srand((double)microtime()*1000000);
$randnum = rand(0,$nooffiles);

/* print the result */
echo "<IMG SRC='$dir/$files[$randnum]' ALT='$files[$randnum]' BORDER='0'><br>";


echo "<input type=hidden name=\"FileName\" value=\"$dir/$files[$randnum]\">";
?>

Answer: <input name="Answer" type="text" value="" /><br>
<input type="submit" value="Add Answer" />





</td>
          </form>

   <?      




 if (sizeof($_POST) > 0){  


$filename=$_POST['FileName'];
$answer=$_POST['Answer'];

$size = filesize($filename);

$imagename = basename($filename);



$movetopath = "Images/";
$newfilename = $movetopath.$imagename;
rename($filename, $newfilename); //rename is used for moving as well


          //
          //     SQL Connect
          //
          $myConn = mysql_connect($dbServer, $dbuser, $dbpass)
                    or die("Failed Connection to $dbServer; No connection to Database; ".mysql_error());
         
          //
          //     SQL Adjusts & Variabless
          //
          mysql_select_db($dbDatabase, $myConn);      //$dbDatabase in place of first column
          $mySql = "";


     
         


             
                   $MD5 = preg_replace("[.jpg]", "", $imagename);
               
           

         
                    //
                    //     SQL
                    //
                    $mySql = "SELECT COUNT($dbAliasImgName) AS result FROM $dbTable WHERE $dbAliasImgName = '" . $imagename. "'";
                    $result = mysql_query($mySql, $myConn) or die(mysql_error());
                   
                   
                    $mySql = "Insert into $dbTable ($dbAliasImgName, $dbAliasImgSize, $dbAliasMD5, $dbAliasAnswer, $dbAliasAgent,$dbAliasIP) values ('$imagename', '$size', '$MD5', '$Answer', '$Agent', '$ipaddr')";
                    mysql_query($mySql, $myConn) or die(mysql_error());
                   
             

         
          mysql_close($myConn);
echo "Your answer has been added."
     ?>
         
<?php     }

?>
</body>
</html>
0
Comment
Question by:JPERKS1985
  • 2
4 Comments
 
LVL 11

Accepted Solution

by:
ch2 earned 500 total points
ID: 17973118
Hi

Can you tell us which php error occurs? and also the phpversion.

ch2
0
 
LVL 1

Author Comment

by:JPERKS1985
ID: 17973720
No php error occurs, the file doesn't move and there is no database entry added.
0
 
LVL 20

Expert Comment

by:Muhammad Wasif
ID: 17973909
confirm what values you have in $filename and $newfilename variables. use echo print these values and let us know.
0
 
LVL 1

Author Comment

by:JPERKS1985
ID: 17985554
When I echoed them they are the correct values.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
how can i gnupg encrypt a PDF document? 12 64
Help in good tutorials for PHP, HTML and CSS 6 41
parse url to form? 7 25
ajax to record click 3 16
Deprecated and Headed for the Dustbin By now, you have probably heard that some PHP features, while convenient, can also cause PHP security problems.  This article discusses one of those, called register_globals.  It is a thing you do not want.  …
Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
Learn how to match and substitute tagged data using PHP regular expressions. Demonstrated on Windows 7, but also applies to other operating systems. Demonstrated technique applies to PHP (all versions) and Firefox, but very similar techniques will w…
Explain concepts important to validation of email addresses with regular expressions. Applies to most languages/tools that uses regular expressions. Consider email address RFCs: Look at HTML5 form input element (with type=email) regex pattern: T…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question