note 15063 deleted from features.file-upload by alindeman
| From: | alindeman@php.net | Date: | Sat, 03 May 2003 13:52:41 +0000 |
| Subject: | note 15063 deleted from features.file-upload by alindeman | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-47435@lists.php.net to get a copy of this message | ||
File uploading with 'safe mode' turned on is a real problem. (As is 'safe mode'
in its present incarnation, generally.) The temporary file is rarely owned by the same userid who
created the page. But PHP, having just created this file, ought to know that and ought to handle it
more sensibly.
It seems to me that 'safe mode' could be more well-defined, e.g. with a set of user-IDs
that are allowed to create pages, any one of whose IDs should be accepted.
Certainly 'safe mode' should be aware of uploads. In its present form, uploading
essentially rules-out the use of safe mode completely. :-/