Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:55646
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.218.42 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <4E82C679.9030800@thelounge.net>
References: <4E81902E.1020304@thelounge.net>
	<4E824B36.4040209@gmail.com>
	<4E824BF7.9070405@thelounge.net>
	<4E824F69.1010703@gmail.com>
	<4E825084.4040703@thelounge.net>
	<4E82B825.5060003@daylessday.org>
	<4E82C679.9030800@thelounge.net>
Date: Wed, 28 Sep 2011 10:46:41 +0200
Message-ID: <CAEZPtU6EV6oMk7hQoav_+gavBkj-z6FX+J6Ys=c-Vt3C11pBEw@mail.gmail.com>
To: Reindl Harald <h.reindl@thelounge.net>
Cc: internals@lists.php.net
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [PHP-DEV] open_basedir bypass -> errata tempnam()
From: pierre.php@gmail.com (Pierre Joye)

hi,

On Wed, Sep 28, 2011 at 9:02 AM, Reindl Harald <h.reindl@thelounge.net> wrote:

First, all you need to test is:

$tempfile = tempnam($temp_folder, 'rhcsv');
$fp = fopen($tempfile , 'w');

> * /tmp MUST NOT be in open_basedir
> * the temp-folder must be read only
> * QUESTION1: why is tempnam() falling back to a dir outside open_basedir?
> * QUESTION2: why is tempnam() creating a file OUTSIDE open_basedir?

The flow can be easily seen here:

http://lxr.php.net/opengrok/xref/PHP_5_4/ext/standard/file.c#798
http://lxr.php.net/xref/PHP_5_4/main/php_open_temporary_file.c#php_do_open_temporary_file

> * QUESTION3: why is there no error-msg taht $dir is readonly instead unexpected fallback

It is how it always work for temp files. Configure the temp
directories correctly is the way to go (set the TMP). As far as I
remember there was a discussion about temp directories and open base
dir a while back, maybe you can find some additional info in it.

Cheers,
-- 
Pierre

@pierrejoye | http://blog.thepimp.net | http://www.libgd.org