#20690 [NEW]: fopen should check with uploaded_file not only open_basedir

From: xuefer@21cn.com Operating system: all PHP version: 4.2.3 PHP Bug Type: Filesystem function related Bug description: fopen should check with uploaded_file not only open_basedir (feature request) in restrict mode, php check fopen() file with uploaded_file when it's not in open_basedir by now, i have to move_uploaded_file() to my {open_basedir}/tmp, read it, and delete it in shutdown_function. i know, we can config php to use stand alone uploadtmp instead of /tmp, and add it to open_basedir, e.g.: /www/tmp but would'nt it nice to check with uploaded_file ? :) -- Edit bug report at http://bugs.php.net/?id=20690&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=20690&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=20690&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=20690&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=20690&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=20690&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=20690&r=support Expected behavior: http://bugs.php.net/fix.php?id=20690&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=20690&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=20690&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=20690&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=20690&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=20690&r=dst IIS Stability: http://bugs.php.net/fix.php?id=20690&r=isapi