Hello everybody,

I am using move_uploaded_file() in a form to handle image uploading,
and it worked just great when I was testing locally in my computer.
After uploading the file in my host provider I get a warning (not an
error) "Permission denied" to move the temporary file to folder I
want.
Should I email the provider or it's somewhere else the problem?

Any help is welcome!
Thanks a lot for your time, I appreciate that.

just_me wrote:

Hello everybody,
>
I am using move_uploaded_file() in a form to handle image uploading,
and it worked just great when I was testing locally in my computer.
After uploading the file in my host provider I get a warning (not an
error) "Permission denied" to move the temporary file to folder I
want.
Should I email the provider or it's somewhere else the problem?
>
Any help is welcome!
Thanks a lot for your time, I appreciate that.

Hi,

The folder your are moving to is the problem.
That folder needs to be writable for the user that runs PHP.

If you are on Linux, that user is often named www-data, or nobody, or
Apache.
If you are silly and run W$ OS with IIS as webserver, the user is named:
IUSR_<machinename>

Just make sure they may write in your targetfolder and your are fine.

Good luck!

Regards,
Erwin Moller

just_me wrote:

Hello everybody,
>
I am using move_uploaded_file() in a form to handle image uploading,
and it worked just great when I was testing locally in my computer.
After uploading the file in my host provider I get a warning (not an
error) "Permission denied" to move the temporary file to folder I
want.
Should I email the provider or it's somewhere else the problem?
>
Any help is welcome!
Thanks a lot for your time, I appreciate that.
>

In addition to Erwin's reply, in my case the open_basedir restriction
added to the problem: the 'final' upload folder should be one 'under'
the basedir, if it's set at all of course.

If open_basedir is set to a dir under the wwwroot a security concern
arises: since the apache server has to be able to write in the dir, in
principle ANY server-parsed script run on the machine can
write/read/modify/delete stuff in the dir.

Sh.