php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #2325 Files upload as web server, not script owner
Submitted: 1999-09-18 21:06 UTC Modified: 1999-09-18 21:18 UTC
From: mpg4 at duluoz dot net Assigned:
Status: Closed Package: Feature/Change Request
PHP Version: 3.0.12 OS: Linux 2.0.36
Private report: No CVE-ID: None
View Add Comment Developer Edit
 [1999-09-18 21:06 UTC] mpg4 at duluoz dot net 
Warning: SAFE MODE Restriction in effect. The script whose uid is 516 is not allowed to access /tmp/php22731aaa owned by uid 0 in ...

This behavior doesn't make any sense -- a file that was just
uploaded by user script should be readable by another of that user's scripts.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [1999-09-18 21:18 UTC] rasmus at cvs dot php dot net 
Safe mode and file uploads do not mix well.  Without some sort of external mechanism to fix the perms of the newly uploaded file, you won't be able to do much with file uploading under safe mode.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Sun May 19 13:01:33 2024 UTC