Image Upload Error - permission denied

[quantum]

Hello,

I am getting the error below when I am trying to upload an image for a new product.

Warning: move_uploaded_file(D:/inetpub/website/perfume/images/bw.jpg): failed to open stream: Permission denied in D:\inetpub\website\perfume\admin\includes\classes\upload.php on line 112

Warning: move_uploaded_file(): Unable to move 'C:\PHP\uploadtemp\php17CD.tmp' to 'D:/inetpub/website/perfume/images/bw.jpg' in D:\inetpub\website\perfume\admin\includes\classes\upload.php on line 112

I read through other posts and the common answer was "CHMOD your permissions to 777". I am on a windows server so the process is slightly different, but I have set the permissions to read, write and execute for the whole admin directory and it still doesn't work. I even tried uninstalling and reinstalling the whole cart, same result.

I am using the most up-to-date version of zen-cart by the way.


***Additonal note since posting: I applied read, write and execute to the entire cart, and the uplaod works now. By having this applied to the entire cart, is the cart at risk in anyway?

[superprg]

Is php.ini set for the upload directory?
Can you use this function in general? Or is it just here that you are getting the error

[quantum]

Hey superprg,

Thanks for the reply. When you say is php.ini set for the directory, how do I check that?

I am also working on another shopping cart with the same host and having the same problem.

The first one I mentoined works fine now because I gave 777 permissions throughout the entire cart.

The second only has these permissions applied to the:
- includes folder in the admin directory
- includes folder in the main directory.
- cache folder in the main directory.

I haven't sent the permissions to 777 for sub folders below those.

I tried uploading an image to the main category section, and while I didn't get an error, it also didn't upload the image.

[superprg]

Hey superprg,

Thanks for the reply. When you say is php.ini set for the directory, how do I check that?

I am also working on another shopping cart with the same host and having the same problem.

The first one I mentoined works fine now because I gave 777 permissions throughout the entire cart.

The second only has these permissions applied to the:
- includes folder in the admin directory
- includes folder in the main directory.
- cache folder in the main directory.

I haven't sent the permissions to 777 for sub folders below those.

I tried uploading an image to the main category section, and while I didn't get an error, it also didn't upload the image.

What is the value of upload_tmp_dir in php.ini?

[quantum]

Hi,

I worked out what php.ini is and ran it:

upload_tmp_dir - C:\PHP\uploadtemp

Is this the info you are looking for?

[superprg]

Hi,

I worked out what php.ini is and ran it:

upload_tmp_dir - C:\PHP\uploadtemp

Is this the info you are looking for?

Yes,
Is permission for this file 777?

Also, please run the function move_uploaded_file seperately and see if it runs properly

[quantum]

Hello,

I don't have access to C:\PHP\uploadtemp to check the permissions.

To run function move_uploaded_file, do I need to install something else? I searched on this in the cart and it only appears as some code in the upload.php file (which doesn't run on its own) and not anywhere else.

Also, if applying 777 permissions to the whole cart folder fixes the problem, wouldn't it likely be that it is a permissions problem within the cart folder and not with the server?

[superprg]

You dont have to install anything to test move_upload_file

Try this

my.html

<form enctype="multipart/form-data" action="uploader.php" method="POST">
<input type="hidden" name="MAX_FILE_SIZE" value="100000" />
Choose a file to upload: <input name="uploadedfile" type="file" /><br />
<input type="submit" value="Upload File" />
</form>


uploader.php:

$target_path = "uploads/";

$target_path = $target_path . basename( $_FILES['uploadedfile']['name']);

if(move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) {
echo "The file ". basename( $_FILES['uploadedfile']['name']).
" has been uploaded";
} else{
echo "There was an error uploading the file, please try again!";
}

[quantum]

I get the following error message: "There was an error uploading the file, please try again!"

[DrByte]

I have set the permissions to read, write and execute for the whole admin directory and it still doesn't work. I even tried uninstalling and reinstalling the whole cart, same result.

***Additonal note since posting: I applied read, write and execute to the entire cart, and the uplaod works now. By having this applied to the entire cart, is the cart at risk in anyway?

Yes, you are putting yourself at risk.
Only the folders mentioned in the installation screens and the installation docs need to be set to read/write/execute.

Here are some tips on securing your site further:
http://www.zen-cart.com/wiki/index.p...ecommendations


If you're having trouble uploading images via the Admin, then your /images folder and subfolders are the place to look for permissions being set to read/write/execute.
You could also upload them via FTP...