ID:               23956
 User updated by:  markus at scherner dot de
 Reported By:      markus at scherner dot de
 Status:           Bogus
 Bug Type:         Filesystem function related
 Operating System: win nt, win xp, unix
 PHP Version:      4.3.2
 New Comment:

I know this very well and I use the function in this example only for
own testings which are not official assignable. When it is so risky
that way you mean, why is the parameter [in include path] supported for
this function? And more, why does it work in 4.3.0 and not in 4.3.2 ?


Previous Comments:
------------------------------------------------------------------------

[2003-06-02 09:33:05] [EMAIL PROTECTED]

writing to a file in the include path will give undefined results and
is a potential security risk.

As such we do not support it, and you might find that attempting to use
fopen() in this way will raise a warning in PHP 5.

------------------------------------------------------------------------

[2003-06-02 08:19:51] markus at scherner dot de

Hey everybody.
Today updated php on my local system (win nt) from 4.3.0 to 4.3.2. Now
the function fopen() gives me an error, when I will write a file within
the include path. In the version before, this error does not exist.

I am using following syntax:

$fp =
fopen($maildir.$localmaildir.microstamp().'_'.$email.'.txt',"w",1);


remark for you: 
the include-path is set before to a path outside the htdocs-dir. The
command fopen (see above) is called from a function which is included
within the script, the var $maildir.$localmaildir is a dir within the
includedir and all works fine until the update, so it must be a bug (or
it was a bug before and I lived with the bug as well :-) ).

The error output is:
fopen(mail/localmail/[EMAIL PROTECTED]): failed to
open stream: No such file or directory in c:\www\casyincs\functions.php
on line 1182 

The pathes are:
www\casyincs (include dir)

www\casyincs\functions.php (includefile with the command)

www\casyincs\mail\localmail (in this dir have to be saved the file

www\htdocs\index.php (web-directory with executing script)

Hoping for an answer, 
best regards and thankyou for a wonderfull powerfull programming
language!!!

best regards
Markus

------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=23956&edit=1

Reply via email to