Bug #38934 [Csd]: move_uploaded_file() cannot read uploaded file outside of open_basedir

Edit report at https://bugs.php.net/bug.php?id=38934&edit=1 ID: 38934 User updated by: z6ax dot iy144ciokg07 at gmail dot com Reported by: z6ax dot iy144ciokg07 at gmail dot com Summary: move_uploaded_file() cannot read uploaded file outside of open_basedir Status: Closed Type: Bug Package: *General Issues Operating System: Ubuntu Linux PHP Version: 5.1.6 Block user comment: N Private report: N New Comment: Prada is it suddenly became popular in the sketch out to skirt the era.Delivered to every heyday products of Prada! Prada prize satiated,and Men's Prada and Prada overnight bag,you be struck by to touch the bounteousness of products from the fashionable outlet.Free shipping purchase,appraisal sale. <a href=http://www.pradapursejp.com/>プラダ</a> <a href=http://www.pradapursejp.com/>財布　プラダ</a> <a href=http://www.pradapursejp.com/>プラダ　バッグ</a> プラダ　バッグ : http://www.pradapursejp.com/ Previous Comments: ------------------------------------------------------------------------ [2012-05-09 04:10:00] hn dot 58gmso dot jvbhxz36 at gmail dot com Go to the exceptional of CHANEL Market, visiting Fashion & Accessories, Chanel bags & Chanel pouch, Watches & Fine Jewelry, their latest creations.Full information and uncage shipping! <a href=http://www.shopchanel2012.com/>シャネル</a> <a href=http://www.shopchanel2012.com/>グッチ バッグ</a> <a href=http://www.shopchanel2012.com/>シャネル 財布</a> シャネル 財布 : http://www.shopchanel2012.com/ ------------------------------------------------------------------------ [2006-10-13 09:50:20] phpbugs at thequod dot de It seems to have been fixed in CVS for PHP_5_2 and HEAD (but not PHP_5_1). Seems like iliaa has just used the wrong text snippet when closing the bug. Thank you! ------------------------------------------------------------------------ [2006-10-13 01:44:46] iliaa@php.net This bug has been fixed in the documentation's XML sources. Since the online and downloadable versions of the documentation need some time to get updated, we would like to ask you to be a bit patient. Thank you for the report, and for helping us make our documentation better. ------------------------------------------------------------------------ [2006-10-03 11:54:20] youza at post dot cz See this bug - http://bugs.php.net/bug.php?id=37236 not any response from PHP :-))) ------------------------------------------------------------------------ [2006-10-02 20:03:38] phpbugs at thequod dot de Since when? As far as I understood, you have expected it to work like this (when trying to reproduce it). Also, from older bug reports, it had been fixed to work like this again. Additionally, from a security perspective, it would open up the upload_tmp_dir for all processes sharing the same php.ini/upload_tmp_dir and you would have to manually set it for every vhost where you use open_basedir for to an own directory. If it's supposed to stay a documentation problem, please emphasize it in the NEWS/upgrade docs, because as it is now (e.g. failing since 5.1.6), it will break all upload scripts for hosts that use open_basedir. IMHO it should work just like expected: PHP should internally allow the temporary uploaded file to get stored in upload_tmp_dir and should allow move_uploaded_file() to move it - PHP should know that it has to make an exception here to the regular open_basedir restriction (and it seemed to have done so before). ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=38934 -- Edit this bug report at https://bugs.php.net/bug.php?id=38934&edit=1