Forum GLPI-Project

yvesdm

Member

Registered: 2007-06-27

Posts: 132

"Potential upload attack, Or file too large"

Hi,

Using 0.72.21 on debian.
Whenever I try to upload a file to a ticket I get this error: "Potential upload attack, Or file too large. Moving temporary file failed."

Max_filesize is set to 200MB in php.ini, so this isn't the problem.
I've ran debug mode, but it didn't show me a lot.
I found this in the php-errors.log but don't know what to do to solve it.

08-10-2009 14:15
Warning(2): rename(/tmp/phpXeIkEB,../files/XLS/2010.xls) [<a href='function.rename'>function.rename</a>]: Permission denied
Backtrace :
/projects/glpi/inc/document.function.php:126            rename()
/projects/glpi/inc/document.class.php:118               uploadDocument()
/projects/glpi/inc/commondbtm.class.php:446             Document->prepareInputForAdd()
/projects/glpi/inc/tracking.class.php:731               CommonDBTM->add()
/projects/glpi/inc/commondbtm.class.php:467             Job->post_addItem()
/projects/glpi/front/helpdesk.php:168           CommonDBTM->add()

Any hints?

Kind regards
Yves

yvesdm

Member

Registered: 2007-06-27

Posts: 132

Re: "Potential upload attack, Or file too large"

Ok, solved the issue.
The problem was ownership rights on subdirectories of the files directory in glpi.

kind regards
Yves

cornk

Member

Registered: 2009-06-01

Posts: 2

Re: "Potential upload attack, Or file too large"

Hi Yvesdm,

May I ask how you do it? I experienced exactly the same and got the same error. I already tried to set rights on folder in glpi, and tmp folder in php but couldn't solve the problem.

I run GLPI on windows server 2003 with xampp setup.

Kind Regards

Ok, solved the issue.
The problem was ownership rights on subdirectories of the files directory in glpi.

kind regards
Yves