Bug #63968 [Com]: Wrong permissions for temporary files on upload

From: Date: Tue, 08 Sep 2020 13:22:11 +0000
Subject: Bug #63968 [Com]: Wrong permissions for temporary files on upload
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-228943@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=63968&edit=1

 ID:                 63968
 Comment by:         benjamin dot 321 dot clerk at gmail dot com
 Reported by:        web at bartwell dot ru
 Summary:            Wrong permissions for temporary files on upload
 Status:             Open
 Type:               Bug
 Package:            Unknown/Other Function
 Operating System:   FreeBSD 8.0
 PHP Version:        5.4.10
 Block user comment: N
 Private report:     N

 New Comment:

We provide the highest quality <a href="https://digiembroidery.com/convert-jpg-to-pes/">custom
embroidery digitizing service</a> . Our beatable and cheapest price starts at only $1 (for
stitch per thousand packages only). Digi provides the best quality embroidery digitizing in a quick
turnaround. Normally our turnaround is from 1 to 24 hours for normal files. And 24 to 48 hours for
big and difficult files. Also, we can treat it as very urgent if our client asks. Feel free to
contact us by sending a message from <a href="https://digiembroidery.com/contact/">the
contact page</a> for quotes or queries.


Previous Comments:
------------------------------------------------------------------------
[2013-01-11 20:08:36] web at bartwell dot ru

I'm upload my patch here. Now it working fine with this patch, but show the warning
"Warning: move_uploaded_file(): Operation not permitted in /path/to/script.php on line
111". How to suppress this warning - I don't know.

------------------------------------------------------------------------
[2013-01-11 15:36:55] web at bartwell dot ru

Description:
------------
I have server with FreeBSD 8.0, Apache 2.2.23 and PHP 5.4.10. That is my VirtualHost config:
<VirtualHost *>
    ServerName site.com
    ServerAlias www.site.com
    DocumentRoot /usr/home/site/pub/htdocs/
    php_admin_value open_basedir /usr/home/site/
    php_admin_value session.save_path 0;0660;/usr/home/site/pub/tmp/
    php_admin_value upload_tmp_dir /usr/home/site/pub/tmp/
</VirtualHost>

/usr/home/site/pub/tmp/ owned by site:www with 4770 permission. Session files creating correctly
(660 and site:www). But uploaded temporary files creating with 600 in permissions. So, because this
temporary file owned by site:www and Apache running from www:www, move_uploaded_file() cannot move
file.

How to fix it?

I think that I need patch PHP for force set permission on this tmp file. But where? And which
internal function in PHP can to do it?

Expected result:
----------------
I want that the temporary file creating with 660 permissions (and site:www).

Actual result:
--------------
This temporary file creating with 600 permissions (and site:www).


------------------------------------------------------------------------



--
Edit this bug report at https://bugs.php.net/bug.php?id=63968&edit=1


Thread (8 messages)

« previous php.bugs (#228943) next »