On 10/09/2012 10:02 AM, A.L.E.C wrote:

>>             $tmp_path = tempnam($temp_dir, 'rcmAttmnt');
> 
> I suppose changing this to
> 
>   $tmp_path = tempnam($temp_dir, 'rcmAttmnt' . $RCMAIL->user->ID);
> 
> should at least fix security part of this issue.

Yes, on RC's part. I was thinking about that.

But then still I get duplicates in $_FILES.



Robin
_______________________________________________
Roundcube Development discussion mailing list
[email protected]
http://lists.roundcube.net/mailman/listinfo/dev

Reply via email to