Koozali.org: home of the SME Server

PHProjekt file upload

Bill Pflaumer

PHProjekt file upload
« on: February 27, 2002, 04:55:51 AM »
I installed PHProjekt on my E-Smith 5.1.2 and I am just loving it (www.phprojekt.com or www.hotscripts.com ) but I cannot get the file upload section on the program to function. The webserver has rights to write to the tmp directory (needed to upload) but I always get
Oops! Something went wrong ...
Please check whether the file exists in the target directory and
the variable dat_rel in the config has the correct value.
Typical values would be:
dateien = "/usr/local/httpd/phprojekt/file"; and dat_rel = "file"; for Linux or /home/e-smith/files/ibays/myproj/html/upload = "c:\htdocs/phprojekt/file"; and upload = "file"; for windows

Thanks for any Help

The more U use this program the better it gets, and it's fairly easy to install on E-Smith Server

Jon Blakely

Re: PHProjekt file upload
« Reply #1 on: February 27, 2002, 05:53:34 AM »
Bill, I notice you have PHProjekt installed in an ibay. Have you disabled the PHP sandbox security that was introduced in SME 5.1.2. This security feature does not allow a PHP script in an ibay to access files outside of the ibay e.g your /tmp directory.

To disable this feature read

http://www.e-smith.org/bboard//read.php?f=3&i=11473&t=11473

Jon

Bill Pflaumer

Re: PHProjekt file upload
« Reply #2 on: February 27, 2002, 04:08:52 PM »
Jon,

It worked 100% and I thank You. You don't need to anwser ,But, what security holes does this action leave open for hackers ?

Once Again,Thanks