note 93911 added to function.getmypid

From: Date: Tue, 06 Oct 2009 15:00:22 +0000
Subject: note 93911 added to function.getmypid
Groups: php.notes 
Request: Send a blank email to php-notes+get-161407@lists.php.net to get a copy of this message
brooke's idea below of using pids to create temporary filenames is not good practice for security since the pid space is relatively small and assignment is relatively predictable. an attacker could modify the execution path by pre-creating files with the same name. much better to use tmpfile() or tempnam() ---- Server IP: 92.48.74.199 Probable Submitter: 87.194.32.179 ---- Manual Page -- http://www.php.net/manual/en/function.getmypid.php Edit -- https://master.php.net/note/edit/93911 Del: integrated -- https://master.php.net/note/delete/93911/integrated Del: useless -- https://master.php.net/note/delete/93911/useless Del: bad code -- https://master.php.net/note/delete/93911/bad+code Del: spam -- https://master.php.net/note/delete/93911/spam Del: non-english -- https://master.php.net/note/delete/93911/non-english Del: in docs -- https://master.php.net/note/delete/93911/in+docs Del: other reasons-- https://master.php.net/note/delete/93911 Reject -- https://master.php.net/note/reject/93911 Search -- https://master.php.net/manage/user-notes.php

« previous php.notes (#161407) next »