Okay, I found a thread at OpenACS: http://www.openacs.com/forums/message-view?message_id=64787
I proposed a new config param to set the directory where new files are created. It used to be possible, and maybe still is, to pass in a query var when uploading a file, thus allowing users to choose a filename. tom jackson On Thursday 24 April 2008 07:08, Tom Jackson wrote: > Isn't there a new safe version of these functions? The link to msdn also > suggests that the replacements are depricated. In general, I think that the > directory where the temp file is created should not be world writable. Some > while back there was a suggestion to replace the C function with a safe > version. > > I'll try to find this old info. > > tom jackson > > On Thursday 24 April 2008 00:32, Gustaf Neumann wrote: > > Dear AOLserver community > > > > There was a problem with "ns_tmpnam", when the aolserver was compiled > > under windows (esp. Vista). The Tcl command"ns_tmpnam" is implemented in > > C using tmpnam(), which exists under WIN32, but behaves differently as on > > unix counterparts and is practically unusable. The problem is that > > tmnam() under Windows generates a filename for the root directory of the > > actual drive (at least under Vista, no permissions under normal > > conditions) and > > ignores the TMP environment variable. > > > > See some background info form Microsoft: > > http://msdn2.microsoft.com/en-us/library/hs3e7355(VS.80).aspx > > > > I have commited a patch to CVS head to address this problem. > > http://aolserver.cvs.sourceforge.net/aolserver/aolserver/nsd/tclfile.c?r1 > >=1 .25&r2=1.26 The patch is local and documents the intended behavior and > > background in detail. > > Please crosscheck. > > > > best regards > > -gustaf neumann > > > > > > -- > > AOLserver - http://www.aolserver.com/ > > > > To Remove yourself from this list, simply send an email to > > <[EMAIL PROTECTED]> with the body of "SIGNOFF AOLSERVER" in the > > email message. You can leave the Subject: field of your email blank. > > -- > AOLserver - http://www.aolserver.com/ > > To Remove yourself from this list, simply send an email to > <[EMAIL PROTECTED]> with the body of "SIGNOFF AOLSERVER" in the > email message. You can leave the Subject: field of your email blank. -- AOLserver - http://www.aolserver.com/ To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of your email blank.
