[php-maint] debian etch - php5 - open_basedir vs tmpfile()

Florian flobee at gmail.com
Tue Jan 16 02:20:50 CET 2007


Hello

I feel sorry that i don't know how to send a message regarding this now
except contacting you directly.

this information has been posted to bugs.php.net and is NOT a
serious/danger problem for debian in my opinion.
you may delete this email.

i found out that the following function is missing:
http://php.net/manual/en/function.tmpfile.php when using "open_basedir"


source:

<?php
// --- tests -----------------------------------------------------------
<?php
$temp = tmpfile();
fwrite($temp, "writing to tempfile");
fseek($temp, 0);
echo 'x:'.fread($temp, 1024);
fclose($temp); // this removes the file
//----------------------------------------------------------------------
?>

return:
*Warning*: tmpfile() [function.tmpfile
<https://admin.plattenmann.dyndns.org/editID3/function.tmpfile>]:
open_basedir restriction in effect. File(/tmp) is not within the allowed
path(s): (/home/abc/:/tmp/) in *index.php* on line *123

vhost setting:
 php_admin_value open_basedir "/home/*abc*/:/tmp/"
tested with :
**php_admin_value open_basedir "/home/*abc*/"
**... does the same error

**without **open_basedir the function works like expected

kind regards
Florian


*



More information about the pkg-php-maint mailing list