note 93911 deleted from function.getmypid by danbrown
| From: | danbrown@php.net | Date: | Tue, 06 Oct 2009 15:32:08 +0000 |
| Subject: | note 93911 deleted from function.getmypid by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-161408@lists.php.net to get a copy of this message | ||
Note Submitter: Anonymous
----
brooke's idea below of using pids to create temporary filenames is not good practice for
security since the pid space is relatively small and assignment is relatively predictable. an
attacker could modify the execution path by pre-creating files with the same name. much better to
use tmpfile() or tempnam()