Edit report at https://bugs.php.net/bug.php?id=38934&edit=1
ID: 38934
User updated by: hn dot 58gmso dot jvbhxz36 at gmail dot com
Reported by: hn dot 58gmso dot jvbhxz36 at gmail dot com
Summary: move_uploaded_file() cannot read uploaded file
outside of open_basedir
Status: Closed
Type: Bug
-Package: Safe Mode/open_basedir
+Package: *General Issues
Operating System: Ubuntu Linux
PHP Version: 5.1.6
Block user comment: N
Private report: N
New Comment:
Go to the exceptional of CHANEL Market, visiting Fashion & Accessories, Chanel
bags & Chanel pouch, Watches & Fine Jewelry, their latest creations.Full
information and uncage shipping!
<a href=http://www.shopchanel2012.com/>ã·ã£ãã«</a>
<a href=http://www.shopchanel2012.com/>ã°ãã ããã°</a>
<a href=http://www.shopchanel2012.com/>ã·ã£ã㫠財å¸</a>
ã·ã£ãã« è²¡å¸ : http://www.shopchanel2012.com/
Previous Comments:
------------------------------------------------------------------------
[2006-10-13 09:50:20] phpbugs at thequod dot de
It seems to have been fixed in CVS for PHP_5_2 and HEAD
(but not PHP_5_1).
Seems like iliaa has just used the wrong text snippet when
closing the bug.
Thank you!
------------------------------------------------------------------------
[2006-10-13 01:44:46] [email protected]
This bug has been fixed in the documentation's XML sources. Since the
online and downloadable versions of the documentation need some time
to get updated, we would like to ask you to be a bit patient.
Thank you for the report, and for helping us make our documentation better.
------------------------------------------------------------------------
[2006-10-03 11:54:20] youza at post dot cz
See this bug - http://bugs.php.net/bug.php?id=37236
not any response from PHP :-)))
------------------------------------------------------------------------
[2006-10-02 20:03:38] phpbugs at thequod dot de
Since when? As far as I understood, you have expected it
to work like this (when trying to reproduce it).
Also, from older bug reports, it had been fixed to work
like this again.
Additionally, from a security perspective, it would open
up the upload_tmp_dir for all processes sharing the same
php.ini/upload_tmp_dir and you would have to manually set
it for every vhost where you use open_basedir for to an
own directory.
If it's supposed to stay a documentation problem, please
emphasize it in the NEWS/upgrade docs, because as it is
now (e.g. failing since 5.1.6), it will break all upload
scripts for hosts that use open_basedir.
IMHO it should work just like expected: PHP should
internally allow the temporary uploaded file to get stored
in upload_tmp_dir and should allow move_uploaded_file() to
move it - PHP should know that it has to make an exception
here to the regular open_basedir restriction (and it
seemed to have done so before).
------------------------------------------------------------------------
[2006-10-02 09:28:17] [email protected]
Reclassified as docu problem.
upload_tmp_dir must be in open_basedir() to be readable/writable.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
https://bugs.php.net/bug.php?id=38934
--
Edit this bug report at https://bugs.php.net/bug.php?id=38934&edit=1
