php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #2325 Files upload as web server, not script owner
Submitted: 1999-09-18 21:06 UTC Modified: 1999-09-18 21:18 UTC
From: mpg4 at duluoz dot net Assigned:
Status: Closed Package: Feature/Change Request
PHP Version: 3.0.12 OS: Linux 2.0.36
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: mpg4 at duluoz dot net
New email:
PHP Version: OS:

 

 [1999-09-18 21:06 UTC] mpg4 at duluoz dot net 
Warning: SAFE MODE Restriction in effect. The script whose uid is 516 is not allowed to access /tmp/php22731aaa owned by uid 0 in ...

This behavior doesn't make any sense -- a file that was just
uploaded by user script should be readable by another of that user's scripts.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [1999-09-18 21:18 UTC] rasmus at cvs dot php dot net 
Safe mode and file uploads do not mix well.  Without some sort of external mechanism to fix the perms of the newly uploaded file, you won't be able to do much with file uploading under safe mode.
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Thu Jun 18 09:00:01 2026 UTC