PP is installed but we can't upload

[marybeshaw]

Hi-
I've installed Photopost Pro and integrated it with phpBB3. It seems to work OK until I try to upload a file. I'd appreciate any insights anyone might have.

• I set my upload limit to 10 MB and tried to upload a 2.2 MB file.
• Safe mode is off.
• The gallery dir is set to 755
• The gallery/data dir is set to 777

The error I get is:
Unable to read the format of file: /home/digi/www/dev.designhousedigital.com/gallery/data/500/medium/2004-jen-and-spencer-5x7.jpg

Server/OS/etc:

• FreeBSD 6.3
• Apache 2
• PHP 5
• mysql 5.0.75
• (viaVerio VPS v3)
• Yes, I have root access
• Integrated with phpBB3
• Gallery URL: Gallery - Main Index

Thanks in advance!
Mary

[Chuck S]

Have you set the data directory at every level to 777 permissions?

[marybeshaw]

That was it. I hadn't set the subdirectories to 777 permissions. Thanks!

I have a general question about these permissions: How does setting web directory permissions to 777 affect the web site's security?

Mary

[Chuck S]

well it can mean files can be uploaded to your site if someone gains access to some type of upload function but our program is secure. In most all hosting environments you must have a directory set to 777 to upload to it.

[marybeshaw]

OK, I understand now. Thanks for the info!

I worked on a web-based file manager for a hosting company years ago, and we uploaded files to /tmp/ and then moved the files from there, rather than uploading directly to a directory. The app may have been run as root or as the owning user, though. I wish I could remember more clearly!

[Chuck S]

well the way a file is uploaded to the server is this

The file when uploaded through http goes to the sites tmp folder on the server is moved to the users uploads directory by our program then processed by the image processor and dumped into the appropriate data directory.

[marybeshaw]

OK. Thanks so much!

[Chuck S]

Have a good day