RAGAZZI!!!!!
ho bisogno di un genio...
Ho scaricato un "pacchetto" per crearmi il mio bel blog nel mio bel sito (myBloggie)
Funziona abbastanza bene, anche se va ancora customizzato.
C'è solo un piccolo fondamentale problema...
NON MI UPLOADA I FILES dal pannello di controllo!!
mi da quest'errore:
Fatal error: Call to undefined function: do_upload() in /web/htdocs/www.fuorirignano.com/home/blog_02/upload.php on line 83
Da premettere, alla cartella dove vanno uploadati i files (la cartella "files") ho dato permesso 777!!!
Riporto quì in basso il codice, AIUTATEMIII vi prego
!!!
codice:
<?
if ( !defined('IN_MYBLOGGIE') )
{
die("You are not allowed to access this page directly !");
}
// Added security
if (!isset($_SESSION['username']) && !isset($_SESSION['passwd'])) {
header( "Location: ./login.php" );
}
else {
$username = $_SESSION['username'];
$result = mysql_query( "SELECT id, user, level FROM ".USER_TBL." WHERE user='$username'" ) or error( mysql_error() );
$userid = mysql_fetch_array( $result );
$_SESSION['user_id'] = $userid['id'];
$level = $userid['level'];
}
if ($level==1) {
$template->set_filenames(array(
'upload' => 'admin/upload.tpl'));
$template->assign_vars(array(
'L_UPLOAD' => $lang['Upload'],
'L_FILE' => $lang['File'],
'L_ACTION' => $lang['Del'],
//'L_REENTER_PASS' => $lang['Reenter_password'],
));
$upload_dir = "files/";
$site_name = $_SERVER['HTTP_HOST'];
$url_dir = "http://".$_SERVER['HTTP_HOST'].dirname($_SERVER['PHP_SELF']);
$url_this = "http://".$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF'];
$upload_url = $url_dir."/".$upload_dir;
$message ="";
// Create Upload Directory
if (!is_dir("files")) {
if (!mkdir($upload_dir))
die ("upload_files directory doesn't exist and creation failed");
if (!chmod($upload_dir,0755))
die ("change permission to 755 failed.");
}
// Process User's Request
if (!empty($_REQUEST['del'])) echo "Request".$_REQUEST['del'];
if (!empty($_REQUEST['del']) && $allow_delete) {
$resource = fopen("log.txt","a");
fwrite($resource,date("Ymd h:i:s")."DELETE - ".$_SERVER['REMOTE_ADDR'].$_REQUEST['del']."\n");
fclose($resource);
if (strpos($_REQUEST['del'],"/.")>0); //possible hacking
else if (strpos($_REQUEST['del'],"files/") === false); //possible hacking
else if (substr($_REQUEST['del'],0,6)=="files/") {
unlink($_REQUEST[del]);
echo "<script>window.location.href='$url_this?mode=upload&message=deleted successfully'</script>";
}
}
else if (!empty($_FILES['userfile'])) {
$resource = fopen("log.txt","a");
fwrite($resource,date("Ymd h:i:s")."UPLOAD - ".$_SERVER['REMOTE_ADDR']
.$_FILES['userfile']['name']." "
.$_FILES['userfile']['type']."\n");
fclose($resource);
$file_type = $_FILES['userfile']['type'];
$file_name = $_FILES['userfile']['name'];
$file_ext = substr($file_name,strrpos($file_name,"."));
//File Size Check
if ( $_FILES['userfile']['size'] > $max_size)
$message = "The file size is over 2MB.";
//File Type/Extension Check
else if (!in_array($file_type, $file_mimes)
&& !in_array($file_ext, $file_exts) )
$message = "Sorry, $file_name($file_type) is not allowed to be uploaded.";
else
$message = do_upload($upload_dir, $upload_url);
echo "<script>window.location.href='$url_this?mode=upload&message=$message'</script>";
}
else if (empty($_FILES['userfile']));
else
$message = "Invalid File Specified.";
// List Files
$handle=opendir($upload_dir);
//$filelist = "";
while ($file = readdir($handle)) {
if(!is_dir($file) && !is_link($file)) {
$filename = "<a href=\"$upload_dir$file\">".$file."</a>";
//$filelist .= "<a href=\"$upload_dir$file\">".$file."</a>";
if ($allow_delete)
$u_delete = "<a class=\"std\" href=\"?mode=upload&del=$upload_dir$file\" title=\"delete dile\">delete</a>";
//$filelist .= " <a class=\"std\" href=\"?mode=upload&del=$upload_dir$file\" title=\"delete dile\">delete</a>
";
$template->assign_block_vars('listing', array(
'FILE' => $filename,
'DELETE' => $u_delete,
));
}
}
function do_upload($upload_dir, $upload_url) {
$temp_name = $_FILES['userfile']['tmp_name'];
$file_name = $_FILES['userfile']['name'];
$file_name = str_replace("\\","",$file_name);
$file_name = str_replace("'","",$file_name);
$file_path = $upload_dir.$file_name;
//File Name Check
if ( $file_name =="") {
$message = "Invalid File Name Specified";
return $message;
}
$result = move_uploaded_file($temp_name, $file_path);
if (!chmod($file_path,0755))
$message = "change permission to 755 failed 1.";
else
$message = ($result)?"$file_name uploaded successfully." :
"Somthing is wrong with uploading a file.";
return $message;
}
if (!isset($filename)) {
$template->assign_block_vars('listing', array(
'FILE' => "<font color=\"red\">".$lang['No_File']."</font>" ,
));
}
$template->pparse('upload');
?>
<center>
<font color="red"><? if (!empty($_REQUEST['message'])) echo $_REQUEST['message'] ?></font>
<form name="upload" id="upload" ENCTYPE="multipart/form-data" method="post">
Upload File <input type="file" id="userfile" name="userfile">
<input type="submit" name="upload" value="Upload">
</form>
</center>
<?
}
else
{
die ("You are not supposed to be here unless you are done something that is not right");
}
?>