ID:               21885
 Comment by:       [EMAIL PROTECTED]
 Reported By:      [EMAIL PROTECTED]
 Status:           Open
 Bug Type:         Filesystem function related
 Operating System: Windows XP - IIS
 PHP Version:      4.3.0
 New Comment:

missing _ in open_basedir ?


Previous Comments:
------------------------------------------------------------------------

[2003-01-26 05:01:33] [EMAIL PROTECTED]

i've a script that worked well with 4.2.2, this scripts makes an
upload

my ini is set to:

open basedir=. 

;;;;;;;;;;;;;;;;
; File Uploads ;
;;;;;;;;;;;;;;;;

; Whether to allow HTTP file uploads.
file_uploads = On

; Temporary directory for HTTP uploaded files (will use system default
if not
; specified).
upload_tmp_dir ="c:\temp\php-uploads"

; Maximum allowed size for uploaded files.
upload_max_filesize = 6M


my script does simply:

move_uploaded_file($_FILES['new_file_file']['tmp_name'],
$this->path.$this->filename);
in my class...

it gives me:

Warning: move_uploaded_file() [function.move-uploaded-file.html]:
open_basedir restriction in effect.
File(c:\temp\php-uploads\phpD.tmp) is not within the allowed path(s):
(.)
in C:\neoportal\modules\mediaalbum\mediafile_class.php on line 95

it seems that a open_basedir check is made on the source file and not
only on the destination file. the file is correctly uploaded to
c:\temp\php-uploads\phpD.tmp but not moved to dest folder (that is a
subfolder of current dir so it's in the allowed path)

The same error is in PHPMYADMIN 2.3.3pl1 when i try to upload a file
.sql

Adding the c:\temp\ path to open basedir as ".;c:\temp\" doesn't help


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=21885&edit=1

Reply via email to