Req #20690 [Opn->Csd]: fopen should check with uploaded_file not only open_basedir

From: Date: Fri, 20 Feb 2015 15:14:15 +0000
Subject: Req #20690 [Opn->Csd]: fopen should check with uploaded_file not only open_basedir
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-190849@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=20690&edit=1 ID: 20690 Updated by: krakjoe@php.net Reported by: xuefer at 21cn dot com Summary: fopen should check with uploaded_file not only open_basedir -Status: Open +Status: Closed Type: Feature/Change Request Package: Safe Mode/open_basedir Operating System: * PHP Version: * -Assigned To: +Assigned To: krakjoe Block user comment: N Private report: N New Comment: Since safe mode has been removed, this bug can be put to bed. This report can still be found for reference, sorry about the wait :) Previous Comments: ------------------------------------------------------------------------ [2002-11-27 20:57:25] xuefer at 21cn dot com (feature request) in restrict mode, php check fopen() file with uploaded_file when it's not in open_basedir by now, i have to move_uploaded_file() to my {open_basedir}/tmp, read it, and delete it in shutdown_function. i know, we can config php to use stand alone uploadtmp instead of /tmp, and add it to open_basedir, e.g.: /www/tmp but would'nt it nice to check with uploaded_file ? :) ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=20690&edit=1

« previous php.bugs (#190849) next »