php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #9144 /tmp/php?????? file created without reference in POST array
Submitted: 2001-02-07 06:29 UTC Modified: 2001-02-14 06:32 UTC
From: david at littlesystems dot com dot au Assigned:
Status: Closed Package: Filesystem function related
PHP Version: 4.0.3pl1 OS: SuSE Linux 7.0
Private report: No CVE-ID: None
View Developer Edit
 [2001-02-07 06:29 UTC] david at littlesystems dot com dot au 
Example HTML file upload form:
<FORM ENCTYPE="multipart/form-data" ACTION="./phpscript.php" METHOD=POST>
<INPUT NAME="myfile" TYPE="file">
<INPUT TYPE="submit">
</FORM>

If a user puts a false reference to a file in that filebox and then clicks the submit button, a "/tmp/php??????" temp file is actually created. But, the reference to that temp file in the HTTP_POST_FILES["myfile"]["tmp_name"] says "none". This means you cannot unlink() these files normally.

Configure line: './configure' '--with-apxs' '--with-pgsql=/var/lib/pgsql' '--enable-track-vars' '--with-ftp' '--enable-trans-sid'

regards,
David

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2001-02-14 06:32 UTC] sniper@php.net 
The files are of 0 bytes long and are deleted after script finishes by PHP itself.
The cleaning should work in 4.0.4pl1 so please upgrade.

--Jani
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Sat Dec 21 13:01:31 2024 UTC