upload file onto site directory

[erp23]

I would like to include a function for speakers to be able to upload presentations onto our website in order to prepare for future talks. Some files can be quite large (e.g. >5-10MB), so my approach was to use ftp to do this.

There is a form where the file can be uploaded and when this is submitted, it is referred to the php ftp script - however, I seem to be getting an error stating:

ftp_login() expects parameter 1 to be resource, boolean given in 'sitepath...'

This is my script:
[PHP]$ftp_server = "serverpath";
$ftp_username = "username";
$ftp_pass = "password";
$connect = ftp_ssl_connect($ftp_server);
$login_result = ftp_login($connect, $ftp_username, $ftp_pass);
$fileupload = addslashes(file_get_contents($_FILES['file']['tmp_name']));
$target = "..Uploads/".$_FILES['userfile']['name']."";
$upload = ftp_put($connect, $target, $fileupload, FTP_BINARY);
ftp_close($connect); [/PHP]

Is there a problem with the script, or is it something to do with permissions on the server?

[Atli]

The problem there is most likely that the ftp_ssl_connect() function is failing, in which case it returns FALSE rather than the resource the ftp_login() function is expecting.

Try validating the connection before you call the ftp_login() function.

[Atli]

As an afterthought...

Why are you using FTP there?
You have already uploaded the file to the server via the usual HTTP protocol, why not just move it to it's new location using the move_uploaded_file() function?

Unless your moving it to another server?

[erp23]

Well, I tried that way initially, but this is what I've been getting:

Warning: move_uploaded_file(Uploads/a2785.ppt): failed to open stream: Permission denied in 'sitemap' on line 65

Warning: move_uploaded_file(): Unable to move '/tmp/phpHrtNMM' to 'Uploads/a2785.ppt' in 'sitemap' on line 65

This was my initial code:
[PHP]if (file_exists("Uploads/" . $_FILES['file']['name']))
{
echo $_FILES['file']['name'] . " already exists. ";
}
else
{
move_uploaded_file($_FILES['file']['tmp_name'],
"Uploads/" . $_FILES['file']['name']); }[/PHP]

My institution's computer officer is quite cautious on security, and the only way of uploading files is through a secure connetion. What I was wondering is:

1) is it possible to save the file through the browser without ftp (do I need to configure server permissions?)

2)if not, can I get it to work with ftp? I suspect Atli is right, the connect seems to return false - how do I go about fixing that?

[Atli]

It is indeed possible to save the file without FTP. There is no problem with your script, the only problem is that you, that is to say the PHP script, does not have permission to write to the destination folder.

The best way to make a folder that PHP can write to is to have PHP itself create the folder. That way the user that is running the PHP script is the owner of that folder and has full access to it.

If that is not possible, you will have to give your PHP script, or the user that is running the PHP script, access to your folder. How to do that, will depend on what operating system your server is running on.

[erp23]

How do I make a directory through php?
Would this work?
And would it need to be done every time, or could this be used for multiple uploads?
[PHP]<?php
mkdir("/path", 0777);?>
[/PHP]