我有一个add-post.php
页面的博客,其中包含一个带有操作的简单表单:
<form id="form" action="add-post-php.php" method="POST" enctype="multipart/form-data">
然后我将文件add-post-php.php
放在与add-form.php
相同的文件夹中。所以我在表单中输入我的博客的详细信息,然后按提交并获取:
禁止
您无权访问此服务器上的/add-post-php.php。
此外,尝试时遇到404 Not Found错误 使用ErrorDocument来处理请求。
我已经在我的localhost上测试了它并且它正常工作,文件的权限设置为0644,但我也在0755尝试过,没有任何改进。我的.htaccess文件没有任何问题,目录中没有其他.htaccess文件。
我的add-post-php.php
脚本完全是:
<?php
include("php/settings.php"); // Contains DB Connections
?>
<?php
$id= time();
$month = date("m");
$year = date("Y");
$path = "images/posts/$year/$month/";
$section = $_POST["section"];
$category = $_POST["category"];
$credit = $_POST["credit"];
$title = ucwords($_POST["title"]);
$text = $_POST["text"];
$exclusive = $_POST["exclusive"];
$added = date("Y-m-d H:i:s");
$photo = $_FILES["photo"]["name"];
$ext = substr(strrchr($photo, '.'), 1);
?>
<?php
$insert_sql = "INSERT INTO posts (id, section, category, credit, title, article, exclusive, added) VALUES('$id', '$section', '$category', '$credit', '$title', '$text', '$exclusive', '$added')";
$insert_res = mysqli_query($con, $insert_sql);
if(mysqli_affected_rows($con)>0){
move_uploaded_file($_FILES["photo"]["tmp_name"],"$path" . $id . "." . $ext);
}
else{
echo "0";
exit();
};
?>
<?php
header("Location: post.php?id=$id");
exit();
?>
当文件明显存在且权限是否正确时,有没有人知道为什么我会收到Forbidden Error?
这是我的.htaccess:
Options -MultiViews
DirectoryIndex posts.php
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^posts/([0-9]+)/?$ posts.php?currentpage=$1 [NC,L,QSA]
RewriteRule ^section/([\w-]+)/?$ section.php?section=$1 [NC,L,QSA]
RewriteRule ^section/([\w-]+)/([0-9]+)/?$ section.php?section=$1¤tpage=$2 [NC,L,QSA]
RewriteRule ^posts/([\w-]+)/?$ posts.php?category=$1 [NC,L,QSA]
RewriteRule ^posts/([\w-]+)/([0-9]+)/?$ posts.php?category=$1¤tpage=$2 [NC,L,QSA]
RewriteRule ^post/([0-9]+)/([\w-]+)/?$ post.php?id=$1&title=$2 [NC,L,QSA]
RewriteRule ^sites/([0-9]+)/?$ sites.php?currentpage=$1 [NC,L,QSA]
RewriteRule ^posts posts.php
RewriteRule ^section section.php
RewriteRule ^sites sites.php
RewriteRule ^about about.php
RewriteRule ^advertise advertise.php
RewriteRule ^subscribe subscribe.php
文件夹结构:
我刚刚再次检查了php错误日志,我看到了这些消息:
[Thu Oct 22 13:04:14.575567 2015] [:error] [pid 1041578] [client 74.125.76.51:56087]文件不存在:/home/fulldist/public_html/***.com/feed。 php,
[Thu Oct 22 09:53:14.646744 2015] [:error] [pid 944286] [client 31.13.113.90:59997]文件不存在:/home/fulldist/public_html/***.com/blog。 PHP。
Feed.php和blog.php确实不存在,但为什么要查找它们呢?
答案 0 :(得分:1)
这没错吗
header("Location: post.php?id=$id");
你不需要这个作为标题
header("Location: posts/$id");
基于此规则
RewriteRule ^posts/([0-9]+)/?$ posts.php?currentpage=$1 [NC,L,QSA]