note 93911 added to function.getmypid
| From: | Anonymous at osu1 dot php dot net | Date: | Tue, 06 Oct 2009 15:00:22 +0000 |
| Subject: | note 93911 added to function.getmypid | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-161407@lists.php.net to get a copy of this message | ||
brooke's idea below of using pids to create temporary filenames is not good practice for
security since the pid space is relatively small and assignment is relatively predictable. an
attacker could modify the execution path by pre-creating files with the same name. much better to
use tmpfile() or tempnam()
----
Server IP: 92.48.74.199
Probable Submitter: 87.194.32.179
----
Manual Page -- http://www.php.net/manual/en/function.getmypid.php
Edit -- https://master.php.net/note/edit/93911
Del: integrated -- https://master.php.net/note/delete/93911/integrated
Del: useless -- https://master.php.net/note/delete/93911/useless
Del: bad code -- https://master.php.net/note/delete/93911/bad+code
Del: spam -- https://master.php.net/note/delete/93911/spam
Del: non-english -- https://master.php.net/note/delete/93911/non-english
Del: in docs -- https://master.php.net/note/delete/93911/in+docs
Del: other reasons-- https://master.php.net/note/delete/93911
Reject -- https://master.php.net/note/reject/93911
Search -- https://master.php.net/manage/user-notes.php