Re: [OT] uploaded files and multi-paged forms

[Alexander Farber (EED)]

Matt Sergeant wrote:
> Its only insecure if you don't use sysopen($fh, $newname, O_RDWR | O_EXCL
> | O_CREAT) (and then get a new filename if that failed 'cos the file
> existed).

Well, then at least the subroutines mkstempt and mkstemp are insecure,
since they call (funny, the comment below is by the File::MkTemp-author):

   $fh = new FileHandle ">$openup";  #and say ahhh.