note 97403 rejected from function.move-uploaded-file by danbrown
| From: | danbrown@php.net | Date: | Mon, 19 Apr 2010 14:09:34 +0000 |
| Subject: | note 97403 rejected from function.move-uploaded-file by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-168412@lists.php.net to get a copy of this message | ||
Note Submitter: checker at d6 dot com
----
As Florian says below, move_uploaded_file ignores the sticky bit on the destination directory, so
even if you have a group sticky bit for the destination of "foo", the moved file is going
to have the group "apache" (or whatever your webserver is using for the group on the temp
upload directory). This seems like a bug, but presumably it's known, so it at least needs to
be called out more clearly.