#21885 [Com]: move_uploaded_file error with open_basedir

ID: 21885 Comment by: m.ford@lmu.ac.uk Reported By: mak77@anvi.it Status: Open Bug Type: Documentation problem Operating System: Windows XP - IIS PHP Version: 4.3.0 New Comment: And, by the way, to mak77@supereva.it: your change to open_basedir can't have "taken", as the error message is still indicating it's just "." -- you did restart your Web server, didn't you? Cheers! Previous Comments: ------------------------------------------------------------------------ [2003-01-28 06:39:29] m.ford@lmu.ac.uk Sorry, Sniper, but I fail to see what #16128 has to do with this. That report complained that open_basedir was not being applied to the *destination* of a move_uploaded_file(); this one complains that it *is* being applied to the *source* of a move_uploaded_file() -- that is, the temporary copy of the uploaded file. There is no obvious (to me) good reason why the open_basedir restriction should be applied to the uploaded temp-file -- if there is, it should be documented so we know what it is. Cheers! ------------------------------------------------------------------------ [2003-01-28 03:03:53] mak77@supereva.it thank you... but adding a path to open basedir doesn't do the job it continue to say File(c:\temp\php-uploads\phpD.tmp) is not within the allowed path(s): (.) ------------------------------------------------------------------------ [2003-01-28 02:21:49] philip@php.net Is upload_tmp_dir affected by these? In otherwords, does the upload_tmp_dir need to be listed in open_basedir? Where does safe_mode come into play? Please provide some documentable information as neither of these bug reports do. #16128 says it's fixed but what does that mean? ------------------------------------------------------------------------ [2003-01-27 23:27:16] sniper@php.net This was changed because of this bug: http://bugs.php.net/bug.php?id=16128&edit=1 And it will stay. Reclassified as documentation prob. ------------------------------------------------------------------------ [2003-01-27 17:11:21] info@ofek.com yes - i have the same problem with php running as cgi in windows 2000 pro with IIS. it used to work just fine, but now with 4.3.0 i get the same error. it seems like this is a bug, because the documentation specifically says: move_uploaded_file() is not affected by the normal safe-mode UID-restrictions. This is not unsafe because move_uploaded_file() only operates on files uploaded via PHP. even though open_basedir is not safe_mode i think the same logic should apply! meanwhile i'll just add the temp dir to open_basedir is a quickfix. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/21885 -- Edit this bug report at http://bugs.php.net/?id=21885&edit=1