Does this seem odd? File Upload Permissions
| From: | David McInnis | Date: | Wed, 27 Mar 2002 07:03:00 +0000 |
| Subject: | Does this seem odd? File Upload Permissions | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-90324@lists.php.net to get a copy of this message | ||
Why does PHP set the execute bit on an uploaded file? This means a user
could upload a script and it would be executable. Ouch! Especially if
the file is available via httpd after upload. . . HELP.
I am saving to a directory with permissions of 766
And when php copies the file it assigns the following permissions.
rwxr-xr-x
I am using the copy command to move the file from the tmp directory.
David McInnis