From:             sopak at matrixway dot cz
Operating system: linux
PHP version:      4.3.10
PHP Bug Type:     Filesystem function related
Bug description:  move_uploaded_file ignore destination and put to default tmp 

Description:
------------
move_uploaded_file ignore destination 

if destination  contains  any relative path function will put file to
default tmp(and no error message is sent, and strip relative path) ,
without(move to actual position) path or with absolute path will function
move file to right destination

I used php 4.3.10
safe_mode on
base_dir I checked  twice ;]

I can tell this  bug was not in 4.3.9

Reproduce code:
---------------
                                                               
$downloadDir="./tmp"; //local TMP dir in my space
                                                               
$file=$downloadDir."upload_".md5($HTTP_POST_FILES['file']['tmp_name']);
                                                               
move_uploaded_file($HTTP_POST_FILES['file']['tmp_name'],$file);
                                                                
//file  is  stored in /tmp/$file have to be  in ./tmp/$file


-- 
Edit bug report at http://bugs.php.net/?id=32023&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=32023&r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=32023&r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=32023&r=trysnapshot51
Fixed in CVS:                http://bugs.php.net/fix.php?id=32023&r=fixedcvs
Fixed in release:            http://bugs.php.net/fix.php?id=32023&r=alreadyfixed
Need backtrace:              http://bugs.php.net/fix.php?id=32023&r=needtrace
Need Reproduce Script:       http://bugs.php.net/fix.php?id=32023&r=needscript
Try newer version:           http://bugs.php.net/fix.php?id=32023&r=oldversion
Not developer issue:         http://bugs.php.net/fix.php?id=32023&r=support
Expected behavior:           http://bugs.php.net/fix.php?id=32023&r=notwrong
Not enough info:             
http://bugs.php.net/fix.php?id=32023&r=notenoughinfo
Submitted twice:             
http://bugs.php.net/fix.php?id=32023&r=submittedtwice
register_globals:            http://bugs.php.net/fix.php?id=32023&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=32023&r=php3
Daylight Savings:            http://bugs.php.net/fix.php?id=32023&r=dst
IIS Stability:               http://bugs.php.net/fix.php?id=32023&r=isapi
Install GNU Sed:             http://bugs.php.net/fix.php?id=32023&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=32023&r=float
No Zend Extensions:          http://bugs.php.net/fix.php?id=32023&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=32023&r=mysqlcfg

Reply via email to