Isn't there a new safe version of these functions? The link to msdn also suggests that the replacements are depricated. In general, I think that the directory where the temp file is created should not be world writable. Some while back there was a suggestion to replace the C function with a safe version.
I'll try to find this old info. tom jackson On Thursday 24 April 2008 00:32, Gustaf Neumann wrote: > Dear AOLserver community > > There was a problem with "ns_tmpnam", when the aolserver was compiled under > windows (esp. Vista). The Tcl command"ns_tmpnam" is implemented in C > using tmpnam(), which exists under WIN32, but behaves differently > as on unix counterparts and is practically unusable. The problem is > that tmnam() under Windows generates a filename for the root directory > of the > actual drive (at least under Vista, no permissions under normal > conditions) and > ignores the TMP environment variable. > > See some background info form Microsoft: > http://msdn2.microsoft.com/en-us/library/hs3e7355(VS.80).aspx > > I have commited a patch to CVS head to address this problem. > http://aolserver.cvs.sourceforge.net/aolserver/aolserver/nsd/tclfile.c?r1=1 >.25&r2=1.26 The patch is local and documents the intended behavior and > background in detail. > Please crosscheck. > > best regards > -gustaf neumann > > > -- > AOLserver - http://www.aolserver.com/ > > To Remove yourself from this list, simply send an email to > <[EMAIL PROTECTED]> with the body of "SIGNOFF AOLSERVER" in the > email message. You can leave the Subject: field of your email blank. -- AOLserver - http://www.aolserver.com/ To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of your email blank.
