Bug #63968 [Com]: Wrong permissions for temporary files on upload

From: Date: Wed, 26 Aug 2020 12:01:33 +0000
Subject: Bug #63968 [Com]: Wrong permissions for temporary files on upload
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-228753@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=63968&edit=1

 ID:                 63968
 Comment by:         embroidery dot 123 dot digi at gmail dot com
 Reported by:        web at bartwell dot ru
 Summary:            Wrong permissions for temporary files on upload
 Status:             Open
 Type:               Bug
 Package:            Unknown/Other Function
 Operating System:   FreeBSD 8.0
 PHP Version:        5.4.10
 Block user comment: N
 Private report:     N

 New Comment:

Looking for the best quality custom embroidery digitizing service            
  <a href="https://digiembroidery.com/">Embroidery
Digitizing</a>
 at unbeatable price and guaranteed quality? you know that there are a lot of embroidery files like
DST, PES, EMB etc. As like convert AI to DST, you can also convert AI to PES embroidery file here  
<a href="https://digiembroidery.com/">Embroidery
Digitizing</a>
 . Our best digitizing team can provide quality assurance with the money back guarantee. So, feel
free to Contact Us <a href="https://digiembroidery.com/">Embroidery
Digitizing</a>contact now for your embroidery digitizing at the beatable price.


Previous Comments:
------------------------------------------------------------------------
[2015-12-01 09:07:36] talonxander4 at gmail dot com

Oh Thats Really marvelous post … Keep iT UP ! http://www.digitemb.com/emb-library.php

------------------------------------------------------------------------
[2015-11-24 07:47:22] Talonxander4 at gmail dot com

Great work! I have been reading your post since long and very much impressed

------------------------------------------------------------------------
[2013-01-11 20:08:36] web at bartwell dot ru

I'm upload my patch here. Now it working fine with this patch, but show the warning
"Warning: move_uploaded_file(): Operation not permitted in /path/to/script.php on line
111". How to suppress this warning - I don't know.

------------------------------------------------------------------------
[2013-01-11 15:36:55] web at bartwell dot ru

Description:
------------
I have server with FreeBSD 8.0, Apache 2.2.23 and PHP 5.4.10. That is my VirtualHost config:
<VirtualHost *>
    ServerName site.com
    ServerAlias www.site.com
    DocumentRoot /usr/home/site/pub/htdocs/
    php_admin_value open_basedir /usr/home/site/
    php_admin_value session.save_path 0;0660;/usr/home/site/pub/tmp/
    php_admin_value upload_tmp_dir /usr/home/site/pub/tmp/
</VirtualHost>

/usr/home/site/pub/tmp/ owned by site:www with 4770 permission. Session files creating correctly
(660 and site:www). But uploaded temporary files creating with 600 in permissions. So, because this
temporary file owned by site:www and Apache running from www:www, move_uploaded_file() cannot move
file.

How to fix it?

I think that I need patch PHP for force set permission on this tmp file. But where? And which
internal function in PHP can to do it?

Expected result:
----------------
I want that the temporary file creating with 660 permissions (and site:www).

Actual result:
--------------
This temporary file creating with 600 permissions (and site:www).


------------------------------------------------------------------------



--
Edit this bug report at https://bugs.php.net/bug.php?id=63968&edit=1


Thread (8 messages)

« previous php.bugs (#228753) next »