Cracking The Vault (part 1)

Nice, Simple & efficient.

What about the max file size of the uploaded file? I noticed that you neglected to include that in your example forms for uploading. Therefore it would default to 2MB and I am assuming this would be too small for many word documents and the like.

Thanks for this stuff. Various little glitches getting it going:
1) I had to specify path to socket -
$hostname='localhost:/var/lib/mysql/mysql.sock';
Can I get round this by configuring my PHP or MySQL?
2) Line 188 in add.php failed for me until I created a 'data' sub-directory (!) ... created with 776 permissions, the application reports a failure; changing to 777 and application works - only to show that the previous copy()s worked fine!
3) If you enter user passwords using INSERT in MYSQL, you need to take out the PASSWORD function in line 16 of login.php ...

If a user who isn't able to edit a document tries to view a document, the file seems to download, but contains:

Thanks for this stuff! For my part everything worked fine, but I'm having problems with adding word documents. If I try, I get the error page that tells me what file types are available. How can I enable word file types?

You'll need to add the MIME-type "applications/msword" to the allowed file array in config.php

You'll need to add the MIME-type "application/msword" to the allowed file array in config.php

There's sometimes a problem with IE downloading the script, rather than the target - is this the problem you have? Can you try with another browser?

Yup, that's right - this can be adjusted in either the PHP configuration file, or by adding a MAX_FILE_SIZE hidden field to the upload form.

This is a nice application. It was interesting to read and compare to other codes and my codes.
Recently I made a small application (With ASP I have to admit) that also allow to put users in groups and those there is no need to give each of the user permissions. Such an addition could be very useful to a big firm...

<p><pre><font color=#008000><xmp>
CREATE TABLE data (
id tinyint(4) NOT NULL auto_increment, ...
</xmp></font></pre><p>
<!-- Code -->
<p><pre><font color=#008000><xmp>
CREATE TABLE data1 (
id tinyint(4) NOT NULL auto_increment,...
</xmp></font></pre><p>

Don't take this a blasting you guys, because it's not! I mean, I really appreciate all the stuff you guys do for us (unlearned) ;^)

What I was reminded of going through this tutorial, was that there seem to be some really important bells and whistles for PHP that need to be included during build time; however, no one told us of these neat toys during the other tutorials.

Could someone cover more of them? or perhaps update the Soothingly Seamless Tutorial? (eg. FTP module and transparent session handling, etc...)

TIA.
T.

I was thinking of the same thing.

In addition I had an idea of another useful application: One of my clients (a merketing company) wants a space on their webpage where they can share documents, project progress information ... with their clients.

So, if you use groups, you can easily achieve that clients are only able to see "their" stuff and not the one of other clients.

Also, if for instants a client wants to post a document on the server he wants to set permissions for the file - but he should only be allowed applicate this feature for users in its own group.

Maybe the guys of melonfire want to add this feature :) or I am doing some coding myself

It just seems like the examples I was looking for.
For some reason however, after checking user and password (and creating the session-file in /tmp), by redirecting to out.php, session_start creates a new, empty session-file.
Any idea why the session isn't recognized by out.php ?
(using PWS, MySQL and PHP4 on Win98)

Any suggestion is welcome.

Hi to all.
I have Explorer 5.5, when I try to download the document that I have uploaded, I get the current page and not the document.
Any idea about?
Thank you
Antonio.