#38963 [Opn->Fbk]: tempnam bypasses open_basedir

ID: 38963 Updated by: tony2001@php.net Reported By: manuel at mausz dot at -Status: Open +Status: Feedback Bug Type: Filesystem function related Operating System: Linux/Gentoo PHP Version: 4.4.4 New Comment: Make sure your phpinfo() display the expected value of open_basedir. Turn on display_errors etc. It doesn't depend on the server API in any way. Previous Comments: ------------------------------------------------------------------------ [2006-09-26 15:58:57] manuel at mausz dot at Please try using mod_php. Using the client also don't work for me. Oh and just to be sure: - tried with safe_mode on + off - open_basedir does _not_ include /tmp ;) ------------------------------------------------------------------------ [2006-09-26 15:30:39] tony2001@php.net Please try using this CVS snapshot: http://snaps.php.net/php4-STABLE-latest.tar.gz For Windows: http://snaps.php.net/win32/php4-win32-STABLE-latest.zip Cannot reproduce: # ./sapi/cli/php -r 'var_dump(tempnam(false, "temp"));' Warning: tempnam(): open_basedir restriction in effect. File() is not within the allowed path(s): (/www) in Command line code on line 1 bool(false) ------------------------------------------------------------------------ [2006-09-26 15:19:47] manuel at mausz dot at Description: ------------ tempnam bypasses open_basedir if dir = false Reproduce code: --------------- <?php $tempfile = tempnam(false, "phptest"); ?> Expected result: ---------------- Warning: tempnam() [function.tempnam]: open_basedir restriction in effect. File(/tmp) is not within the allowed path(s): (...) in Actual result: -------------- # ls /tmp/phptest* /tmp/phptestt4mIOa ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=38963&edit=1