php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Request #20690 fopen should check with uploaded_file not only open_basedir
Submitted: 2002-11-27 20:57 UTC Modified: 2015-02-20 15:14 UTC
Votes:1
Avg. Score:3.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: xuefer at 21cn dot com Assigned: krakjoe (profile)
Status: Closed Package: Safe Mode/open_basedir
PHP Version: * OS: *
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: xuefer at 21cn dot com
New email:
PHP Version: OS:

 

 [2002-11-27 20:57 UTC] xuefer at 21cn dot com
(feature request)
in restrict mode, php check fopen() file with uploaded_file when it's not in open_basedir
by now, i have to move_uploaded_file() to my {open_basedir}/tmp, read it, and delete it in shutdown_function.

i know, we can config php to use stand alone uploadtmp instead of /tmp, and add it to open_basedir, e.g.: /www/tmp
but would'nt it nice to check with uploaded_file ?
:)

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2011-01-01 20:28 UTC] jani@php.net
-Package: Feature/Change Request +Package: Safe Mode/open_basedir -Operating System: all +Operating System: * -PHP Version: 4.2.3 +PHP Version: *
 [2015-02-20 15:14 UTC] krakjoe@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: krakjoe
 [2015-02-20 15:14 UTC] krakjoe@php.net
Since safe mode has been removed, this bug can be put to bed.

This report can still be found for reference, sorry about the wait :)
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sun Dec 22 01:01:30 2024 UTC