Calling mkdir with a mask of 777 specifies the permissions you want to attribute to the directory you're creating. This does not mean that you'll magically be able to create files or directories in parts of the filesystem where you (the user running the script, note your webserver configiration) lacks permission to do so. See CGI Programming from the tutorials seciton.