php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #9144 /tmp/php?????? file created without reference in POST array
Submitted: 2001-02-07 06:29 UTC Modified: 2001-02-14 06:32 UTC
From: david at littlesystems dot com dot au Assigned:
Status: Closed Package: Filesystem function related
PHP Version: 4.0.3pl1 OS: SuSE Linux 7.0
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: david at littlesystems dot com dot au
New email:
PHP Version: OS:

 

 [2001-02-07 06:29 UTC] david at littlesystems dot com dot au 
Example HTML file upload form:
<FORM ENCTYPE="multipart/form-data" ACTION="./phpscript.php" METHOD=POST>
<INPUT NAME="myfile" TYPE="file">
<INPUT TYPE="submit">
</FORM>

If a user puts a false reference to a file in that filebox and then clicks the submit button, a "/tmp/php??????" temp file is actually created. But, the reference to that temp file in the HTTP_POST_FILES["myfile"]["tmp_name"] says "none". This means you cannot unlink() these files normally.

Configure line: './configure' '--with-apxs' '--with-pgsql=/var/lib/pgsql' '--enable-track-vars' '--with-ftp' '--enable-trans-sid'

regards,
David

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2001-02-14 06:32 UTC] sniper@php.net 
The files are of 0 bytes long and are deleted after script finishes by PHP itself.
The cleaning should work in 4.0.4pl1 so please upgrade.

--Jani
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Mon Oct 14 08:01:27 2024 UTC