PHP :: Bug #63968 :: Wrong permissions for temporary files on upload

Bug #63968

Wrong permissions for temporary files on upload

Submitted:

2013-01-11 15:36 UTC

Modified:

Votes:	5
Avg. Score:	3.2 ± 1.3
Reproduced:	0 of 1 (0.0%)

From:

web at bartwell dot ru

Assigned:

Status:

Open

Package:

Unknown/Other Function

PHP Version:

5.4.10

OS:

FreeBSD 8.0

Private report:

CVE-ID:

None

View Add Comment Developer Edit

Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.

php.net Username: php.net Password:

Quick Fix:	(description)
	Block user comment
Status:		Assign to:
Package:
Bug Type:
Summary:
From:	web at bartwell dot ru
New email:
PHP Version:		OS:

New/Additional Comment:

[2013-01-11 15:36 UTC] web at bartwell dot ru

Description:
------------
I have server with FreeBSD 8.0, Apache 2.2.23 and PHP 5.4.10. That is my VirtualHost config:
<VirtualHost *>
    ServerName site.com
    ServerAlias www.site.com
    DocumentRoot /usr/home/site/pub/htdocs/
    php_admin_value open_basedir /usr/home/site/
    php_admin_value session.save_path 0;0660;/usr/home/site/pub/tmp/
    php_admin_value upload_tmp_dir /usr/home/site/pub/tmp/
</VirtualHost>

/usr/home/site/pub/tmp/ owned by site:www with 4770 permission. Session files creating correctly (660 and site:www). But uploaded temporary files creating with 600 in permissions. So, because this temporary file owned by site:www and Apache running from www:www, move_uploaded_file() cannot move file.

How to fix it?

I think that I need patch PHP for force set permission on this tmp file. But where? And which internal function in PHP can to do it?

Expected result:
----------------
I want that the temporary file creating with 660 permissions (and site:www).

Actual result:
--------------
This temporary file creating with 600 permissions (and site:www).

Patches

patch-main_open_temporary_file (last revision 2013-01-11 20:06 UTC by web at bartwell dot ru)

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports

[2013-01-11 20:08 UTC] web at bartwell dot ru

I'm upload my patch here. Now it working fine with this patch, but show the warning "Warning: move_uploaded_file(): Operation not permitted in /path/to/script.php on line 111". How to suppress this warning - I don't know.

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2021 The PHP Group All rights reserved.	Last updated: Sat Jan 16 06:01:23 2021 UTC