PHP 4.0 Bug #9144: /tmp/php?????? file created without reference in POST array

From: david@littlesystems.com.au Operating system: SuSE Linux 7.0 PHP version: 4.0.3pl1 PHP Bug Type: Filesystem function related Bug description: /tmp/php?????? file created without reference in POST array Example HTML file upload form: <FORM ENCTYPE="multipart/form-data" ACTION="./phpscript.php" METHOD=POST> <INPUT NAME="myfile" TYPE="file"> <INPUT TYPE="submit"> </FORM> If a user puts a false reference to a file in that filebox and then clicks the submit button, a "/tmp/php??????" temp file is actually created. But, the reference to that temp file in the HTTP_POST_FILES["myfile"]["tmp_name"] says "none". This means you cannot unlink() these files normally. Configure line: './configure' '--with-apxs' '--with-pgsql=/var/lib/pgsql' '--enable-track-vars' '--with-ftp' '--enable-trans-sid' regards, David -- Edit Bug report at: http://bugs.php.net/?id=9144&edit=1