ID:               25555
 Updated by:       [EMAIL PROTECTED]
 Reported By:      xuefer at 21cn dot com
-Status:           Open
+Status:           Bogus
 Bug Type:         Feature/Change Request
 Operating System: all
 PHP Version:      4.3.3
 New Comment:

Doesn't make any sense.



Previous Comments:
------------------------------------------------------------------------

[2003-09-16 06:05:56] xuefer at 21cn dot com

Description:
------------
i'd suggest, when we open file, if it's not in open_basedir, check if
it is_uploaded_file(), if yes, let's open it

the way we can only do is to use is_uploaded_file() and
move_uploaded_file(), we can't even do file_size(), which is
troublesome. and we have to prepair a writable directory within
open_basedir, move in the file, fopen() and fread()

but i don't see any good point, when we're using super safe $_FILE;

if $_FILES['userfile']['tmp_name'] is "uploaded://xFkcg.tmp", maybe
nice for php4.3+



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=25555&edit=1

Reply via email to