Bug #74189 [Opn]: weird notice on file upload

Edit report at https://bugs.php.net/bug.php?id=74189&edit=1 ID: 74189 Updated by: nikic@php.net Reported by: costinel dot manole at gmail dot com Summary: weird notice on file upload Status: Open Type: Bug Package: *General Issues Operating System: Centos 7 PHP Version: 7.1.2 Block user comment: N Private report: N New Comment: The notice occurs if creating a temporary file in the specified directory failed and PHP has to fall back to the system temporary directory. Can you please check whether the directory you specified by upload_tmp_dir is actually writable by the user PHP runs under? Previous Comments: ------------------------------------------------------------------------ [2017-03-01 11:39:07] spam2 at rhsoft dot net > Anyway I have changed to > upload_tmp_dir = "/var/www/upload" > sys_temp_dir = "/var/www/upload" > > Same result what do you expect? "file created in the system's temporary directory" and to solve it you set "upload_tmp_dir" and "sys_temp_dir" *again* to the same value which is the problem common sense: upload_tmp_dir = "/var/www/upload" sys_temp_dir = "/tmp" ------------------------------------------------------------------------ [2017-03-01 11:30:52] costinel dot manole at gmail dot com On my server "/var/www/uploadtemp" is not shared by multiple apps. Anyway I have changed to upload_tmp_dir = "/var/www/upload" sys_temp_dir = "/var/www/upload" Same result. I have eliminated all the PHP code from file. The PHP notice is generated with pure HTML Code <form action="test_upload.php" method="post" enctype="multipart/form-data"> <input name="userfile[]" type="file" id="userfile" maxlength="" multiple /> <input type="submit" name="submit" value="Send File"></td> </form> If I attach 3 files I get 3 notices in error_log ------------------------------------------------------------------------ [2017-03-01 10:48:31] spam2 at rhsoft dot net well i am not a php-developer but the point is *not* using /tmp which is shared between applications and servies at all and so "what about just not using /tmp for file uploads" answering with "i have tried /tmp/somesubdir" is strange "Unknown on line 0" in that case is because it's no line of PHP code which triggers that so lwoer error reporting or just use sane uplod directories and don't open /tmp at all for a webserver - in other words forbid it by eclude /tmp from open_basedir and anything else ------------------------------------------------------------------------ [2017-03-01 10:41:09] costinel dot manole at gmail dot com I have already tried. upload_tmp_dir = "/tmp/httpd/upload" sys_temp_dir = "/tmp/httpd" Anyway, I have no problems with file uploading and I don't need to change any config. I just wanted to report that the notice is not displaying ok ("Unknown on line 0"). Also I would like to turn off this notice, if it's possible. I upload files every hour and I don't want any notice to inform me that I have sucessfuly uploaded files. ------------------------------------------------------------------------ [2017-03-01 10:29:54] spam2 at rhsoft dot net what about just not using /tmp for file uploads? something like: upload_tmp_dir = "/var/www/uploadtemp" or way better a own "upload_tmp_dir" for every virtual host so that one can't steel temp file from other users? ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=74189 -- Edit this bug report at https://bugs.php.net/bug.php?id=74189&edit=1