note 93911 deleted from function.getmypid by danbrown

From: Date: Tue, 06 Oct 2009 15:32:08 +0000
Subject: note 93911 deleted from function.getmypid by danbrown
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-161408@lists.php.net to get a copy of this message
Note Submitter: Anonymous ---- brooke's idea below of using pids to create temporary filenames is not good practice for security since the pid space is relatively small and assignment is relatively predictable. an attacker could modify the execution path by pre-creating files with the same name. much better to use tmpfile() or tempnam()

« previous php.notes (#161408) next »