safer handling of temporary files with open_basedir (thanks to Thijs Kinkhorst)
This commit is contained in:
@@ -6,6 +6,7 @@ $Id$
|
||||
$HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyAdmin/ChangeLog $
|
||||
|
||||
2.11.10.0 (not yet released)
|
||||
- [core] safer handling of temporary files with open_basedir (thanks to Thijs Kinkhorst)
|
||||
|
||||
2.11.9.0 (2008-08-28)
|
||||
- bug #2031221 [auth] Links to version number on login screen
|
||||
|
@@ -560,7 +560,7 @@ class PMA_File
|
||||
return false;
|
||||
}
|
||||
|
||||
$new_file_to_upload = $GLOBALS['cfg']['TempDir'] . '/' . basename($this->getName());
|
||||
$new_file_to_upload = tempnam(realpath($GLOBALS['cfg']['TempDir']), basename($this->getName()));
|
||||
|
||||
// surpress warnings from beeing displayed, but not from beeing logged
|
||||
// any file access outside of open_basedir will issue a warning
|
||||
|
Reference in New Issue
Block a user