php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #63968 Wrong permissions for temporary files on upload
Submitted: 2013-01-11 15:36 UTC Modified: -
Votes:5
Avg. Score:3.2 ± 1.3
Reproduced:0 of 1 (0.0%)
From: web at bartwell dot ru Assigned:
Status: Open Package: Unknown/Other Function
PHP Version: 5.4.10 OS: FreeBSD 8.0
Private report: No CVE-ID: None
Have you experienced this issue?
Rate the importance of this bug to you:

 [2013-01-11 15:36 UTC] web at bartwell dot ru
Description:
------------
I have server with FreeBSD 8.0, Apache 2.2.23 and PHP 5.4.10. That is my VirtualHost config:
<VirtualHost *>
    ServerName site.com
    ServerAlias www.site.com
    DocumentRoot /usr/home/site/pub/htdocs/
    php_admin_value open_basedir /usr/home/site/
    php_admin_value session.save_path 0;0660;/usr/home/site/pub/tmp/
    php_admin_value upload_tmp_dir /usr/home/site/pub/tmp/
</VirtualHost>

/usr/home/site/pub/tmp/ owned by site:www with 4770 permission. Session files creating correctly (660 and site:www). But uploaded temporary files creating with 600 in permissions. So, because this temporary file owned by site:www and Apache running from www:www, move_uploaded_file() cannot move file.

How to fix it?

I think that I need patch PHP for force set permission on this tmp file. But where? And which internal function in PHP can to do it?

Expected result:
----------------
I want that the temporary file creating with 660 permissions (and site:www).

Actual result:
--------------
This temporary file creating with 600 permissions (and site:www).

Patches

patch-main_open_temporary_file (last revision 2013-01-11 20:06 UTC by web at bartwell dot ru)

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2013-01-11 20:08 UTC] web at bartwell dot ru
I'm upload my patch here. Now it working fine with this patch, but show the warning "Warning: move_uploaded_file(): Operation not permitted in /path/to/script.php on line 111". How to suppress this warning - I don't know.
 [2015-11-24 07:47 UTC] Talonxander4 at gmail dot com
Great work! I have been reading your post since long and very much impressed
 [2015-12-01 09:07 UTC] talonxander4 at gmail dot com
Oh Thats Really marvelous post … Keep iT UP ! http://www.digitemb.com/emb-library.php
 
PHP Copyright © 2001-2019 The PHP Group
All rights reserved.
Last updated: Sat Dec 14 10:01:23 2019 UTC