script per upload e exec

[fre2004]

ciauz!!

ho trovato questo script su internet, ma siccome era tutto attacato, ho dovuto darli una sitemata.
ora non so se a causa mia o per è scritto male non va.

potreste darmi un occhiata?
inoltre visto che esegue un comando exec potete darmi qualche dritta??

<?php ini_set( "max_execution_time", "3600" ); // sets the maximum execution time of this script to 1 hour. 
$fileName = $_FILES['message']['name']; // get client side file name 
if( $fileName ) { // Check File Type
 $fileNameParts = explode( ".", $fileName ); // seperate the name from the ext
  $fileExtension = end( $fileNameParts ); // part behind last dot 
  $fileExtension = strtolower( $fileExtension ); // reduce to lower case 
  if( !$fileExtension == "mp3" ) { die( "$fileName is not an mp3 file." ); } // Check File Size 
  $fileSize = $_FILES['message']['size']; // size of uploaded file 
  if( $fileSize == 0 ) { die( "Sorry. The upload of $fileName has failed. The file size is 0." ); } else if( $fileSize > 10240000 ) { //10 MB
   die( "Sorry. The file $fileName is larger than 10MB. Advice: reduce the file quality and upload again." ); } else { $uploadDir = '/var/www/vhosts/yourdomain.com/httpdocs/audio/audio_to_encode/'; // Where the temp file will go 
   $uploadFile = str_replace( " ", "", $uploadDir . $_FILES['message']['name'] ); // Get rid of spaces in the filename 
   $finalDir = '/var/www/vhosts/yourdomain.com/httpdocs/audio/flv_files/'; // Where the final file will go
    $finalFile = str_replace( " ", "", $finalDir . $fileNameParts[0] . ".flv" ); // Get rid of spaces in the filename 
    if ( !move_uploaded_file( $_FILES['message']['tmp_name'], $uploadFile ) ) { echo "Possible file upload attack! Here's some debugging info:\n"; echo( $_FILES ); } $encode_cmd = "/usr/bin/ffmpeg -i $uploadFile -f flv -acodec mp3 -ab 64 -ac 1 -title \"Clip Title\" -author \"Clip Author\" -copyright \"Clip Copyright\" $finalFile"; exec( $encode_cmd ); unlink( $uploadFile ); chmod( $finalFile, 0644 ); } } ?>

[SuperSavio]

che errore restituisce?

[fre2004]

ovvimante prima lo tutto settato.

comunque niente da pagina bianca.

[SuperSavio]

prova così

<?php
 ini_set( "max_execution_time", "3600" ); // sets the maximum execution time of this script to 1 hour.
$fileName = $_FILES['message']['name']; // get client side file name
if( $fileName ) { // Check File Type
  $fileNameParts = explode( ".", $fileName ); // seperate the name from the ext
  $fileExtension = end( $fileNameParts ); // part behind last dot
  $fileExtension = strtolower( $fileExtension ); // reduce to lower case
  if( $fileExtension != "mp3" ) { die( "$fileName is not an mp3 file." ); } // Check File Size
  $fileSize = $_FILES['message']['size']; // size of uploaded file
  if( $fileSize == 0 ) { die( "Sorry. The upload of $fileName has failed. The file size is 0." ); } else if( $fileSize > 10240000 ) { //10 MB
   die( "Sorry. The file $fileName is larger than 10MB. Advice: reduce the file quality and upload again." ); } else { $uploadDir = '/var/www/vhosts/yourdomain.com/httpdocs/audio/audio_to_encode/'; // Where the temp file will go
   $uploadFile = str_replace( " ", "", $uploadDir . $_FILES['message']['name'] ); // Get rid of spaces in the filename
   $finalDir = '/var/www/vhosts/yourdomain.com/httpdocs/audio/flv_files/'; // Where the final file will go
    $finalFile = str_replace( " ", "", $finalDir . $fileNameParts[0] . ".flv" ); // Get rid of spaces in the filename
    if ( !move_uploaded_file( $_FILES['message']['tmp_name'], $finalFile ) ) { echo "Possible file upload attack! Here's some debugging info:\n"; echo( $_FILES ); } 
    $encode_cmd = "/usr/bin/ffmpeg -i $uploadFile -f flv -acodec mp3 -ab 64 -ac 1 -title \"Clip Title\" -author \"Clip Author\" -copyright \"Clip Copyright\" $finalFile";
     exec( $encode_cmd );
     unlink( $uploadFile );
     chmod( $finalFile, 0644 ); } } ?>

il form comè?

[fre2004]

adesso provo

<form action="upload2.php" method="post" enctype="multipart/form-data"> <input type="file" name="miofile" size="42"> <input type="submit" name="submit" value="Submit"> </form>

[fre2004]

ok,

almeno adesso mi rstituisce qualcosa.

andiamo per passi.

io devo far caricare video, quindi dovrei far caricare file avi o mpeg o asf.

quindi devo cambiare questa riga in cosa?

if( $fileExtension != "mp3" ) { die( "$fileName is not an mp3 file." ); } // Check File Size 

poi vedremo altro.

[SuperSavio]

if( $fileExtension != "avi" AND $fileExtension != "mpeg" AND $fileExtension != "asf" ) { die( "L'estensione nn corrisponde con quelli ammessi" ); } // Check File Size

[fre2004]

ultimissima cosa:

dove piazzo un header(location

per reidirizzare a operazione completata??

grazie mille!

[SuperSavio]

fai così
if ( !move_uploaded_file( $_FILES['message']['tmp_name'], $finalFile ) ) { echo "Possible file upload attack! Here's some debugging info:\n"; echo( $_FILES ); } else{ header() ; }