Member Avatar for OsaMasw

Hello guys
have a nice day..
I have a problem need to be solved, I have upload script which save files in "/uploads" folder everything was going good until my boss decided to move upload file to storage server and need to store all files in "/etc/mnt/storage/uploads"
so what should i do, and what changes i Should made to my script or my server configration to achive this.

Edited by OsaMasw
  • 3 Contributors
  • 12 Replies
  • 2K Views
  • 3 Days Discussion Span
  • Latest Post Latest Post by cereal

Dani AI

Generated

Good move keeping uploads outside DocumentRoot. There are two separate pieces to get right: (1) how clients reach files (/uploads URL vs. filesystem path) and (2) whether Apache/PHP can actually read/write the storage. As noted, Alias only affects the URL clients see; it does not grant write access. Your errors showed a permissions/mount problem, not a URL problem.

Because your storage is FUSE-backed, root could read it but www-data could not. The fix you found is the right one: enable user_allow_other in /etc/fuse.conf, then mount with -o allow_other. For a persistent mount, also pass ownership and permissions, for example: ... allow_other,uid=www-data,gid=www-data,umask=0027,default_permissions .... That keeps other users from snooping while letting Apache traverse and write. See the FUSE man page for user_allow_other, allow_other, and default_permissions. (man7.org)

Quick checks that catch 90% of issues:

  • Verify PHP is allowed to touch that path: check open_basedir and include /mnt/storage/uploads (or disable it for that vhost if you must). (php.net)
  • On Ubuntu/Debian, confirm AppArmor is not confining Apache/PHP-FPM away from /mnt/storage. aa-status will tell you; adjust or relax the profile if needed. (documentation.ubuntu.com)
  • Ensure every parent directory is executable by www-data. namei -l /mnt/storage/uploads will highlight a missing x on /mnt or /mnt/storage. (man7.org)

In your PHP, target the absolute path and surface errors clearly:

$dest = '/mnt/storage/uploads/' . basename($_FILES['file']['name']);
if (!move_uploaded_file($_FILES['file']['tmp_name'], $dest)) {
    error_log('Upload failed: ' . json_encode(error_get_last()));
}

move_uploaded_file() will return false (and warn) if it cannot open the destination, which usually means perms, mount options, or open_basedir. (php.net)

If you later need per-user authorization, avoid a bare Alias and stream via your app or use X-Sendfile, as hinted by asking for script context.

Recommended Answers

All 12 Replies

Member Avatar for mattster

Well it might be helpful to see your directory structure and upload script..? Common sense.

Member Avatar for cereal

Also explain the reason, because you could simply use the Alias directive to point the external directory to clients:

Alias /uploads /etc/mnt/storage/uploads

that way you don't have to alter your scripts, but if your boss decision was taken for security reasons, then Alias is the wrong solution.

commented: I like this solution +2
Member Avatar for OsaMasw

for Alias solution , if user downloads a file with any download manager ,does it shows the full path for file or only the "uploads/filename.xxx" ?

Member Avatar for cereal

does it shows the full path for file

No, the aliased path will not be directly accessible or visible so, only /uploads/file.ext will be visible to clients. There are some constraints, so read the documentation carefully.

commented: thanks +0
Member Avatar for OsaMasw

am sorry for this mistake, I want to upload files from folder /var/www/script/upload.php to /mnt/storage/uploads/
I give "../../../mnt/storage/uploads/" as path but it show me error in upload always, what should I do to make upload happen.
I gave chmod 755 to upload folder
and chown www-data to this folder and still nothing uploaded or shown from this folder

Edited by OsaMasw
Member Avatar for cereal

Use an absolute path to define the destination directory, then test and check Apache & PHP error logs, it should return the reason: permissions, wrong destination or something else. In case of problems, return the error information and possibly, as suggested previously, your script.

My previous definition wasn't exact, my fault: you don't have to change the path for the clients, they will not spot any change, but you have to modify the destination path for the upload script.

Member Avatar for OsaMasw

when am trying to view file its shows me this error
[Mon Mar 02 22:45:32 2015] [error] [client xx.xx.xx.xx] (13)Permission denied: access to /uploads/ denied

when uploading file
move_uploaded_file(../../../mnt/storage/uploads/filename.ext): failed to open stream: Permission denied in /var/www/script/upload.php on line 236

[Mon Mar 02 22:55:43 2015] [error] [client xx.xx.xx.xx] PHP Warning: imagejpeg(): Unable to open '../../../mnt/storage/uploads/pics/file.ext' for writing: Permission denied in /var/www/script/functions.php on line 444,

Edited by OsaMasw
Member Avatar for cereal

Ok,

regarding the Alias directive, did you created the correct setup with a Directory directive as suggested by the documentation?

In particular, if you are creating an Alias to a directory outside of your DocumentRoot, you may need to explicitly permit access to the target directory.

Alias /uploads /mnt/storage/uploads/
<Directory /mnt/storage/uploads/>
    Require all granted
</Directory>

In case you're NOT using Apache ver.2.4, then replace Require all granted with:

Order allow,deny
Allow from all

And refer to the Apache documentation for your current version. This should fix the first error.

Also, try:

sudo chown -R www-data:www-data /mnt/storage/uploads/
sudo chmod -R 755 /mnt/storage/uploads/

The -R flag will apply the rule to all subdirectories and files in the defined path. If it does not work extend it to the group: 775. Check also the permissions of the mount point, i.e. storage, when you re-mount the permission could change and deny the access.

Member Avatar for OsaMasw

I did all the above from giving chmod 755 to folders and give Apache user to access this folder, but I found something might be the cause for my problem,
when accessing the server as root I can view content of /mnt/storage/
but when logged in in any other users including Apache user www-data its permission denide, so is it something related to mounted device or what ?

Edited by OsaMasw
Member Avatar for cereal

It could be, do:

ls -lh /mnt
ls -lh /mnt/storage
ls -lh /mnt/storage/uploads

And return the output for each command. Question: the web server is chrooted?

Member Avatar for OsaMasw

thanks for replying
I found a solution for my problem by editing file
/etc/fuse.conf
remove # in front of allow_other

Member Avatar for cereal

Great, thanks for sharing!

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.