php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Request #25555 rename/copy/fopen should be able to handle uploaded
Submitted: 2003-09-16 06:05 UTC Modified: 2003-09-16 09:48 UTC
From: xuefer at 21cn dot com Assigned:
Status: Not a bug Package: Feature/Change Request
PHP Version: 4.3.3 OS: all
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: xuefer at 21cn dot com
New email:
PHP Version: OS:

 

 [2003-09-16 06:05 UTC] xuefer at 21cn dot com
Description:
------------
i'd suggest, when we open file, if it's not in open_basedir, check if it is_uploaded_file(), if yes, let's open it

the way we can only do is to use is_uploaded_file() and move_uploaded_file(), we can't even do file_size(), which is troublesome. and we have to prepair a writable directory within open_basedir, move in the file, fopen() and fread()

but i don't see any good point, when we're using super safe $_FILE;

if $_FILES['userfile']['tmp_name'] is "uploaded://xFkcg.tmp", maybe nice for php4.3+


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2003-09-16 09:48 UTC] sniper@php.net
Doesn't make any sense.

 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Sun Jul 06 19:01:36 2025 UTC