#44420 [Com]: upload_tmp_dir directive in php.ini ignored for file uploads

From: Date: Thu, 19 Jun 2008 08:07:46 +0000
Subject: #44420 [Com]: upload_tmp_dir directive in php.ini ignored for file uploads
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-125874@lists.php.net to get a copy of this message 
 ID:               44420
 Comment by:       dalvenjah at dal dot net
 Reported By:      jturner at paycomonline dot com
 Status:           Open
 Bug Type:         *General Issues
 Operating System: Windows Server 2003
 PHP Version:      5.2.5
 New Comment:

(Figured I'd chime in since the bug hasn't seen activity since March.)

Same issue here:
Linux Ubuntu hardy 8.04
Apache 2 v 2.2.8
PHP5 5.2.4-2ubuntu5.1
running php as an apache module.

I'm also running with safe_mode on and open_basedir set.

Setting upload_tmp_dir (to /home/www/tmp in this case) is ignored:

Jun 19 00:49:49 web apache2: PHP Warning:  Unknown: open_basedir 
restriction in effect. File(/tmp) is not within the allowed path(s): 
(/home/www) in Unknown on line 0

though setting the TMPDIR environment variable before starting apache 
does work.

-dalvenjah


Previous Comments:
------------------------------------------------------------------------

[2008-03-13 13:17:04] jturner at paycomonline dot com

Yes, the IWAM and IUSR accounts both have read, write, and list folder
contents rights in the ACL for that directory. I forgot to mention
yesterday that I have PHP set to run as an ISAPI module.

------------------------------------------------------------------------

[2008-03-13 12:19:49] jani@php.net

Is that path writable/readable by the user with which the webserver
runs as?

------------------------------------------------------------------------

[2008-03-12 16:36:02] jturner at paycomonline dot com

Description:
------------
The upload_tmp_dir directive is set in the php.ini to
"C:\DOCUME~1\ADMINI~1.HQ-\LOCALS~1\Temp\php\upload" and shows up as such
when running phpinfo().  However, when I try to upload a file it fails, 
and print_r($_FILES) reports that "tmp_name" is set to
"C:\WINDOWS\TEMP\[filename]".  It appears that the directive is being
ignored in favor of the environment variable, which is contrary to the
documentation.  

PHP5.2.5/IIS6.0/Windows Server 2003

A search of the bug database turned up bug #39451 which appears to be
similar but was marked as fixed in 5.2.1RC3.



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=44420&edit=1

Thread (11 messages)

« previous php.bugs (#125874) next »