vb.org Archive - Upload Hack

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 2.x Full Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=4)

- - Upload Hack (https://vborg.vbsupport.ru/showthread.php?t=37233)

I'm getting "Couldn't Copy File To Server" error. I have done some troublshooting on this...

1) I have checked the permissions and they are 777.
2) I have verified that the login is checked properly.
3) I have verified that the folder is created, for the user, when a file upload is attempted, in the upload directory.
4) I have verified that the copy path is correct. I put some test code in to see what the script thinks the path is and it returns:
/MyAbsolutePath/ipscone/MyTestFile.gif, which is the correct absolute path.
5) I have even manually copied a file to the upload/member folder and when I try to use the Upload.php program to upload that same file, it correctly sees that it's a duplicate. So that part works ok.
6) I have tried to view that directory with the View Files and even though there is one file that was manually copied, it doesn't display with the View Files.
7) I modified the upload.php file to do some debugging and found something I can't explain. In the case view: section, I modified the following:

Code:

$dir = opendir("$absolute_path/$PHP_AUTH_USER") 

       or $list .= "<tr><td>Error: Can't open $absolute_path/$PHP_AUTH_USER</td></tr>";

while($file = readdir($dir)) {{

to see that the absolute path was right and it was. Now, I know there is one file in the directory but the code within the while loop does not execute even once. Since there is one file there (manually placed) it should go through this loop, at least once. Why not?

Can there be an incompatibility with php 4.3.1 that I'm using?

But the file just won't copy. I get "Couldn't Copy File to Server".

Any idea what might be causing this error? opendir adn copy seem to fail.

Is this the only UPLOAD program that produces individual folders for each of the members?

What version is included in the first post in this thread? Is there a newer version somewhere?

Ok, I have a clue to the symptoms but no answer to the problem yet.

The opendir() and copy() fail because of the way the directory is created. The script uses the following to create the upload directory

PHP Code:


		
			
if (!is_dir("$absolute_path/$PHP_AUTH_USER")) {

   $oldumask = umask(0);

   mkdir("$absolute_path/$PHP_AUTH_USER",0777); 

   umask($oldumask);

   if ($indexfile = 

        fopen("$absolute_path/$PHP_AUTH_USER/index.html", "a")) {

      $timenow = time();

      $name    = strip_tags($PHP_AUTH_USER);

      fwrite($indexfile, "");

      fclose($indexfile);

    }

}

With this code, the directory is created but the owner is "apache." When the owner is apache, the opendir() and copy() don't work in the script.

But if I manually create any directory that I plan to use, instead of the program doing it, everything works fine. I can upload and the opendir() and copy() work fine.

How does one change the script to avoid this problem? I believe it is normal for "apache" to be the owner of something created from the script but why doesn't the copy() and opedir() work for a directory that has "apache" as the owner? Any way around this?

Now, I'm thinking this inability to use copy() and opendir() has to do with the open_basedir configuration.

The program works perfectly, if I manually create the folder and set the permissions. But if the program creates the directory, I can't open or copy to it.

Anyone know how I can get around this and open and copy files, if this is the case? Or, if this is not the problem what is?

man, where's v2? it sounds great
any1 here knows how to add more upload boxes?

Quote:

05-01-03 at 02:30 PM ipscone said this in Post #93
Now, I'm thinking this inability to use copy() and opendir() has to do with the open_basedir configuration.

The program works perfectly, if I manually create the folder and set the permissions. But if the program creates the directory, I can't open or copy to it.

Anyone know how I can get around this and open and copy files, if this is the case? Or, if this is not the problem what is?

i think u must go to telnet or SSH and change its chown from apache to that site's user.

bump once again the creator if ur out there please share version 2 with us

Here is one I'm working on...

Photo album

looks good is it intergrated in to users database?

Can it be edited to work with MP3's?

X vBulletin 3.8.12 by vBS Debug Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_code_printable (1)bbcode_php_printable (1)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages:

Phrase Groups Available:

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01232 seconds Memory Usage 1,750KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_code_printable (1)bbcode_php_printable (1)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: