#38934 [Opn]: move_uploaded_file() cannot read uploaded file outside of open_basedir

ID: 38934 Updated by: tony2001@php.net Reported By: phpbugs at thequod dot de Status: Open -Bug Type: Safe Mode/open_basedir +Bug Type: Documentation problem Operating System: Ubuntu Linux PHP Version: 5.1.6 New Comment: Reclassified as docu problem. upload_tmp_dir must be in open_basedir() to be readable/writable. Previous Comments: ------------------------------------------------------------------------ [2006-09-30 15:25:14] phpbugs at thequod dot de Just tried it with PHP_5_2 (CVS), resulting in: Warning: Unknown: open_basedir restriction in effect. File(/tmp) is not within the allowed path(s): (/var/www) in Unknown on line 0 Warning: File upload error - unable to create a temporary file in Unknown on line 0 I've configured PHP just with "--with-apxs2=/usr/bin/apxs2" and use this simple php.ini file: open_basedir = "/var" display_errors=on display_startup_errors=On error_reporting=E_ALL ------------------------------------------------------------------------ [2006-09-29 18:29:26] moron at industrial dot org Sorry for the flurry. In our case it turned out that the error message was just misleading. A simple permissions issue on the target directory was the cause (arrgh) but the error message explicitly stated that the problem was the open_basedir setting of the upload_tmp directory. So more of an annoyance than a show stopper in our case. ------------------------------------------------------------------------ [2006-09-29 18:13:11] moron at industrial dot org Sorry, forgot to note that in our case, "upload_tmp_dir" is explicitly set. ------------------------------------------------------------------------ [2006-09-29 18:12:05] moron at industrial dot org Exact same behaviour with 4.4.4 under FreeBSD 6.1. Frustrating as this bug has appeared before. ------------------------------------------------------------------------ [2006-09-25 12:54:21] tony2001@php.net Cannot reproduce with both 5.1.6 and latest CVS. With upload_tmp_dir not set (aka "/tmp") and open_basedir="/www", I get this: File is valid, and was successfully uploaded. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/38934 -- Edit this bug report at http://bugs.php.net/?id=38934&edit=1