Edit report at https://bugs.php.net/bug.php?id=55804&edit=1
ID: 55804
User updated by: spam2 at rhsoft dot net
Reported by: spam2 at rhsoft dot net
Summary: tempnam(): wrong fallback to /tmp
Status: Open
Type: Bug
Package: Safe Mode/open_basedir
Operating System: Linux
PHP Version: 5.3.8
Block user comment: N
Private report: N
New Comment:
your definition of "easy solution" is a little bit strange
how can it be easy to set a ENV-Var for 500 domains where
only most of them use docroot/temp/
a smarter fallback would be the configured uploadtemp but not /tmp
Previous Comments:
------------------------------------------------------------------------
[2011-09-28 09:28:44] paj...@php.net
I was wrong about the removal, that's only for tmpfile.
The rest of my comment remains (BC break and easy solution).
------------------------------------------------------------------------
[2011-09-28 09:22:29] spam2 at rhsoft dot net
they are not removed or how should a stat-call in a terminal show that they are
existing? anyways - they must not be created
Warning: fopen() [function.fopen.php]: open_basedir restriction in effect.
File(/tmp/rhcsv5f9RIs) is not within the
allowed path(s):
(/mnt/data/www/beta.rhsoft.net:/Volumes/dune/www-servers/phpincludes:/var/www/uploadtemp)
in
/mnt/data/www/beta.rhsoft.net/tempname.php on line 6
Warning: fopen(/tmp/rhcsv5f9RIs) [function.fopen.php]: failed to open stream:
Operation not permitted in
/mnt/data/www/beta.rhsoft.net/tempname.php on line 6
[harry@srv-rhsoft:~]$ stat /tmp/rhcsv5f9RIs
Datei: â/tmp/rhcsv5f9RIsâ
GröÃe: 0 Blöcke: 0 EA Block: 4096 reguläre leere
Datei
Gerät: 809h/2057d Inode: 48 Verknüpfungen: 1
Zugriff: (0600/-rw-------) Uid: ( 48/ apache) Gid: ( 48/ apache)
Zugriff : 2011-09-28 08:58:01.046916064 +0200
Modifiziert: 2011-09-28 08:58:01.046916064 +0200
Geändert : 2011-09-28 08:58:01.046916064 +0200
------------------------------------------------------------------------
[2011-09-28 09:14:51] paj...@php.net
if the files are not removed on request or sapi shutdown, then we have a bug.
------------------------------------------------------------------------
[2011-09-28 09:13:01] spam2 at rhsoft dot net
> Documented behavior, changing it will break BC
what sort of BC?
the created file is outside open_basedir, can not be used and can not be deleted
so this file is useless and simply at the wrong location
i can not imagine any code which useful relies on that "feature"
------------------------------------------------------------------------
[2011-09-28 09:09:51] paj...@php.net
Documented behavior, changing it will break BC.
To correctly configure the temp directory in each host is a the way to go for
now.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
https://bugs.php.net/bug.php?id=55804
--
Edit this bug report at https://bugs.php.net/bug.php?id=55804&edit=1
