note 15691 added to features.file-upload

Take care to set the correct ownership of the php-tempdir when operating in safe-mode. If you use Apache and PHP as a module, you can set upload_tmp_dir to /tmp/php for example and then chown the directory /tmp/php to the user Apache runs under (wwwrun, nobody, etc - depends on installation/distribution). Then make the directory read&writable. Works very fine here! By the way, do I need to verify an uploaded file via 'is_uploaded_file', when I have 'register_globals' switched off and I use the name provided by 'tmp_name'? This name should always point to a file in the tempdir, right? Or can this be tricked? -- http://www.php.net/manual/en/features.file-upload.php http://master.php.net/manage/user-notes.php?action=edit+15691 http://master.php.net/manage/user-notes.php?action=delete+15691 http://master.php.net/manage/user-notes.php?action=reject+15691