irchtml Mon Jan 10 20:12:58 2005 EDT
Modified files: /phpdoc/en/reference/filesystem/functions move-uploaded-file.xml Log: Bug #31407: move_uploaded_file() documentation incohenrent http://cvs.php.net/diff.php/phpdoc/en/reference/filesystem/functions/move-uploaded-file.xml?r1=1.3&r2=1.4&ty=u Index: phpdoc/en/reference/filesystem/functions/move-uploaded-file.xml diff -u phpdoc/en/reference/filesystem/functions/move-uploaded-file.xml:1.3 phpdoc/en/reference/filesystem/functions/move-uploaded-file.xml:1.4 --- phpdoc/en/reference/filesystem/functions/move-uploaded-file.xml:1.3 Sun Jan 26 21:50:41 2003 +++ phpdoc/en/reference/filesystem/functions/move-uploaded-file.xml Mon Jan 10 20:12:58 2005 @@ -1,5 +1,5 @@ <?xml version="1.0" encoding="iso-8859-1"?> -<!-- $Revision: 1.3 $ --> +<!-- $Revision: 1.4 $ --> <!-- splitted from ./en/functions/filesystem.xml, last change in rev 1.2 --> <refentry id="function.move-uploaded-file"> <refnamediv> @@ -38,13 +38,16 @@ contents to the user, or even to other users on the same system. </para> - ¬e.sm.uidcheck; - <note> + <note> <para> - <function>move_uploaded_file</function> is not affected by the normal - &safemode; UID-restrictions. This is not unsafe because - <function>move_uploaded_file</function> only operates on files uploaded - via PHP. + <function>move_uploaded_file</function> is both &safemode; + and <link linkend="ini.open-basedir">open_basedir</link> + aware. However, restrictions are placed only on the + <parameter>destination</parameter> path as to allow the moving + of uploaded files in which <parameter>filename</parameter> may conflict + with such restrictions. <function>move_uploaded_file</function> ensures + the safety of this operation by allowing only those files uploaded + through PHP to be moved. </para> </note> <warning>