file upload problem

[metazai]

Howdy.

Anyone see any problems here:

         <form action"includes/uploaditems.php" method="post" enctype="multipart/form-data"> <span class="verd14boldblue">CALENDAR</span><br />
          <br />
          <strong>UPLOAD LATEST FILE</strong><br />
          <input type="file" name="userfile"/><br />
          <input type="submit" value="Upload File" />
          <br />
          <br /></form>

Or on the uploaditems.php page:

<?php

$uploaddir = '../../documents/';
$uploadfile = $uploaddir. $_FILES['userfile']['name'];

print "<pre>";
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) {
    print "File is valid, and was successfully uploaded. ";
    print "Here's some more debugging info:\n";
    print_r($_FILES);
} else {
    print "Possible file upload attack!  Here's some debugging info:\n";
    print_r($_FILES);
}
print "</pre>";



?>

?????

Because it doesn't do anything but reload the original page -- no error codes, nothing. That last code segment is the entire uploaditems.php page, but it ain't uploading items. It's late, and I'm sure I'm missing something . . . . Any help would be appreciated.

[sde]

is php configured properly? from the code, it looks like you are referencing php.net, and it does look right.

just verify the Related Configurations Note on this page. if you don't have access to the php.ini, you could probably just look at phpinfo(); output.

[metazai]

I believe it is configured properly, and I am uploading image files on other parts of the site just fine.

It's a .csv file I'm uploading, and it's not the only form on the page. Would that make any difference?

[sde]

it shouldn't matter if it is the only form on the page or not. are you sure the upload directory has the proper permissions set for php to copy files to?

[metazai]

775

[sde]

5 is read/execute .. it probably needs to be 777.

[metazai]

Interesting . . . doesn't work on 777 either, but regardless, should I be getting an error response on that second page? I can't even tell if it's going to it at all.

[sde]

print your file array on the page it gets submitted to.

PHP Code:

<?php
header('content-type: text/plain');
print_r($_FILES);
exit;
?>

[metazai]

Well, that makes it official. It's not submitting to that page at all, and I think I figured out why.

<form action"includes/uploaditems.php" method="post" enctype="multipart/form-data">

For my shameful oversight, there is no equal . . . literally . . . after the word action.

Or, to be more poetic about it,

Son-of-a-(*&^(%(#&&@@@!!?#?!@#@!

[sde]

lol .. what's worse is a second set of eyes didn't catch it =/