Thomas -Balu- Walter wrote:
> Hello all,
> 
> I had a minor problem today after I switched our roundcube to a
> different virtual server. That one had the the open_basedir restriction
> active which led to the following error when uploading attachments:
> 
> PHP Warning: copy(): open_basedir restriction in effect.
> File(/tmp/phpGk2plC) is not within the allowed path(s):
> (/home/.../htdocs/) in /home/.../htdocs/program/steps/mail/upload.inc on
> line 42 ./program/steps/mail/upload.inc:  if (copy($filepath,
> $tmpfname))
> 
> I wonder if it would be possible to use move_uploaded_file() instead of
> copy() as this only restricts the destination directory? It is also more
> secure, because only uploaded files can be moved...

The latest CVS version of RoundCube already uses move_uploaded_file()
instead of copy().
> 
>       Balu
> 
Regards,
Thomas


Reply via email to