Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:75175 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 91431 invoked from network); 2 Jul 2014 18:34:29 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 2 Jul 2014 18:34:29 -0000 Authentication-Results: pb1.pair.com smtp.mail=iwanluijks@gmail.com; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=iwanluijks@gmail.com; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.212.180 as permitted sender) X-PHP-List-Original-Sender: iwanluijks@gmail.com X-Host-Fingerprint: 209.85.212.180 mail-wi0-f180.google.com Received: from [209.85.212.180] ([209.85.212.180:36365] helo=mail-wi0-f180.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id ED/F8-47713-3B054B35 for ; Wed, 02 Jul 2014 14:34:28 -0400 Received: by mail-wi0-f180.google.com with SMTP id hi2so1003208wib.1 for ; Wed, 02 Jul 2014 11:34:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type; bh=rUHnhYvgmycRMaPXcMZ+j6OvJrY412iBL0oa9m6RgQk=; b=TcAyoFNS3c1q090/BFBCIwB72mVrBKEpcUwrlDrKTUbdVE643Mod4eAxSkeVC9Q7K9 WA3zDJ3T+XzWjV0IiXox0pTERKc0movrOCa2HwN8GjzJhqtf5oQTXS65LU01VVp86Et/ Kw+p0ePXrRuod/vIBQKnbtiPg8G0QVl36kU6v+D6gXmrxSN35b7R3BWgW8T1Gu0ZCXp6 2KkIL6dZPWB24RukUgnA8ScSp3qr5kTp/Cp4+GemduhfjWFSX9MJYL6mzrAK3gxM5VyD 2svDFeMpiB4W72WEsAjUFhwgQySuRCpih3iwsLXpCGKXcQ5U5kvj2ACJN10EosC+qSvp aJpA== X-Received: by 10.194.243.70 with SMTP id ww6mr60461803wjc.76.1404326062800; Wed, 02 Jul 2014 11:34:22 -0700 (PDT) Received: from [192.168.2.3] (77-173-181-29.ip.telfort.nl. [77.173.181.29]) by mx.google.com with ESMTPSA id fn1sm57862915wib.18.2014.07.02.11.34.21 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 02 Jul 2014 11:34:21 -0700 (PDT) Message-ID: <53B450AD.8030708@gmail.com> Date: Wed, 02 Jul 2014 20:34:21 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0 MIME-Version: 1.0 To: internals@lists.php.net References: <53B44876.7070306@hoa-project.net> In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms030400000902040001090509" Subject: Re: [PHP-DEV] PHP-5.6 php://input temp files From: iwanluijks@gmail.com (Iwan Luijks) --------------ms030400000902040001090509 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, As it is noted in the section on php://memory and php://temp (http://php.net/manual/en/wrappers.php.php#refsect2-wrappers.php-unknown-= unknown-unknown-unknown-unknown-descriptios) it wouldn't harm anyone if the fact could at least be noted at php://input too. Kind regards, Iwan Luijks -- Michael Wallner schreef op 2-7-2014 20:24: > Wat? > > > On 2 July 2014 19:59, Ivan Enderlin @ Hoa > wrote: > >> On 02/07/2014 19:56, Michael Wallner wrote: >> >>> Hi! >>> >> Hi :-), >> >> >> >> While hunting other bugs I noticed that the temp stream for php://inp= ut >>> stores its temp files in sys_temp_dir instead of upload_tmp_dir (of >>> course), which might be quite unexpected and cumbersome for a sysadmi= n. >>> >> Are you sure this is the expected behavior? Did you confirm against a >> panel of sysadmins? >> >> Cheers :-). >> >> -- >> Ivan Enderlin >> Developer of Hoa >> http://hoa-project.net/ >> >> PhD. student at DISC/Femto-ST (Vesontio) and INRIA (Cassis) >> http://disc.univ-fcomte.fr/ and http://www.inria.fr/ >> >> Member of HTML and WebApps Working Group of W3C >> http://w3.org/ >> >> >> -- >> PHP Internals - PHP Runtime Development Mailing List >> To unsubscribe, visit: http://www.php.net/unsub.php >> >> > --------------ms030400000902040001090509 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME-cryptografische ondertekening MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMYjCC BfMwggTboAMCAQICD2TH9KmrwE9+X97e/RRXKTANBgkqhkiG9w0BAQUFADBVMQswCQYDVQQG EwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMS8wLQYDVQQDEyZTd2lzc1NpZ24gUGVyc29u YWwgU2lsdmVyIENBIDIwMDggLSBHMjAeFw0xNDA3MDExODQzNTNaFw0xNTA3MDExODQzNTNa MEUxHTAbBgNVBAsTFEVtYWlsIFZhbGlkYXRlZCBPbmx5MSQwIgYDVQQDFBtFbWFpbDogaXdh bmx1aWprc0BnbWFpbC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKO2fr i2sLk6W0BGv+aHDa1c+LI+UF1HxX0OAx0h/4FtNYPsVkpzKttnKomT9mU9ZU9IqLy9aVJUB7 qQ+MMXMMRHGdU0ab2pTCE8rdz7t0edUdoV6/q8luyTjRr8VpTgILYBeV793B/Y1QUjznaHP8 TsugyCSMq5Z/vkvtVC5ljyDayFM0MyHOfmNHk/fYj1VxosCU38l7iajRY5lmEqSDb0/3qOx/ VMpZJ0O4UOnqkxuh8CV/Ykx2peyn0QfJfOSwSLpJYYZYy5sSb3ygqADrE73pxP1lhQWvpQky LJ25wax/2QAfwHO5uM5jBxUSEsuxcoIzvrfvnHuOvZ2AM0QLAgMBAAGjggLOMIICyjAOBgNV HQ8BAf8EBAMCBLAwEwYDVR0lBAwwCgYIKwYBBQUHAwQwHQYDVR0OBBYEFNq/MbArYiNinNiy kYk3NQObaWkSMB8GA1UdIwQYMBaAFOs1sVZtFWBY9OEizRxGHK7QBABlMIH/BgNVHR8Egfcw gfQwR6BFoEOGQWh0dHA6Ly9jcmwuc3dpc3NzaWduLm5ldC9FQjM1QjE1NjZEMTU2MDU4RjRF MTIyQ0QxQzQ2MUNBRUQwMDQwMDY1MIGooIGloIGihoGfbGRhcDovL2RpcmVjdG9yeS5zd2lz c3NpZ24ubmV0L0NOPUVCMzVCMTU2NkQxNTYwNThGNEUxMjJDRDFDNDYxQ0FFRDAwNDAwNjUl MkNPPVN3aXNzU2lnbiUyQ0M9Q0g/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlP29i amVjdENsYXNzPWNSTERpc3RyaWJ1dGlvblBvaW50MGQGA1UdIARdMFswWQYJYIV0AVkBAwEE MEwwSgYIKwYBBQUHAgEWPmh0dHA6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NT aWduLVNpbHZlci1DUC1DUFMtUjQucGRmMIHZBggrBgEFBQcBAQSBzDCByTBkBggrBgEFBQcw AoZYaHR0cDovL3N3aXNzc2lnbi5uZXQvY2dpLWJpbi9hdXRob3JpdHkvZG93bmxvYWQvRUIz NUIxNTY2RDE1NjA1OEY0RTEyMkNEMUM0NjFDQUVEMDA0MDA2NTBhBggrBgEFBQcwAYZVaHR0 cDovL3NpbHZlci1wZXJzb25hbC1nMi5vY3NwLnN3aXNzc2lnbi5uZXQvRUIzNUIxNTY2RDE1 NjA1OEY0RTEyMkNEMUM0NjFDQUVEMDA0MDA2NTAfBgNVHREEGDAWgRRpd2FubHVpamtzQGdt YWlsLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEA9ywba8ZmyGWLcCgloKd+IzdZsBp52Bz3LRpu 1v7P4Dqq/aRWpxyJMuIQQsPI2A7BgE19mqVLPIOC9iqpr7dBuRS/bAq2VfZkPm2q1PUp3dwB nCVMFvacJCC1Te3OpbmxIoCaUk8dlpRfaQjweceIYi6tjvmACVBLsyIuXrMeMm6+0XhNbdqM Xh9kAX1FL3XpTERa450qlbYaf3sf5qlxt8Gqdt+avkx+7QuZC4VvSavpwoS59+Dw0/xBATQR b+m7BJviDmbuzT/fn0gA5xL0F2UpYcjXoCdmIRsY0wj1bdfznvsaRGFd6FUtEiV0EYTfxI/4 YBUkGDqK+Sc/dGlw0zCCBmcwggRPoAMCAQICCQDiVrdTl2t2WDANBgkqhkiG9w0BAQUFADBH MQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMSEwHwYDVQQDExhTd2lzc1Np Z24gU2lsdmVyIENBIC0gRzIwHhcNMDgwNzA5MTExMTA5WhcNMjMwNzA5MTExMTA5WjBVMQsw CQYDVQQGEwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMS8wLQYDVQQDEyZTd2lzc1NpZ24g UGVyc29uYWwgU2lsdmVyIENBIDIwMDggLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAPfzU15JbYwD5ScXIRhgpXaUPxUQuCFAzzYzrCpymo9hw2veekkIWD2A2DvwnR1B EAG/awdWGo2zPb9jujF+4nJGGGiH14VPoMl7E6nQOdGJ1jVnaHbBX5YJzc86BdE/BgUK2hby Q/KkBx2irIB1AZ2g6Pc0p7+25jloZlJHOSlNtJ3oKq0VYbSiMeAQkdse5EPxK94QwTTLbITu YhQnRNgx8d88IczArJBo03RoyRdKjjsJp7EFZY0HpJCuLnreekRvsAL+dP8ah/VY6aYl8cyI IifYyzHBLygMcXIe9/sITm56Bawhfz8KWmb4v+UWFPkbm8SfujMNhpcVXa6hBo8CAwEAAaOC AkYwggJCMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBTr NbFWbRVgWPThIs0cRhyu0AQAZTAfBgNVHSMEGDAWgBQXoM3B5EG2Ols7y0WdvRzCmPqGWDCB /wYDVR0fBIH3MIH0MEegRaBDhkFodHRwOi8vY3JsLnN3aXNzc2lnbi5uZXQvMTdBMENEQzFF NDQxQjYzQTVCM0JDQjQ1OURCRDFDQzI5OEZBODY1ODCBqKCBpaCBooaBn2xkYXA6Ly9kaXJl Y3Rvcnkuc3dpc3NzaWduLm5ldC9DTj0xN0EwQ0RDMUU0NDFCNjNBNUIzQkNCNDU5REJEMUND Mjk4RkE4NjU4JTJDTz1Td2lzc1NpZ24lMkNDPUNIP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxp c3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludDBkBgNVHSAEXTBbMFkG CWCFdAFZAQMBAzBMMEoGCCsGAQUFBwIBFj5odHRwOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24u Y29tL1N3aXNzU2lnbi1TaWx2ZXItQ1AtQ1BTLVIzLnBkZjB0BggrBgEFBQcBAQRoMGYwZAYI KwYBBQUHMAKGWGh0dHA6Ly9zd2lzc3NpZ24ubmV0L2NnaS1iaW4vYXV0aG9yaXR5L2Rvd25s b2FkLzE3QTBDREMxRTQ0MUI2M0E1QjNCQ0I0NTlEQkQxQ0MyOThGQTg2NTgwDQYJKoZIhvcN AQEFBQADggIBAC4qdtqX80zfZCfhWy2V77lVLtu4CWUxQLBLvXyQsdnYcRhTzug1LJsUuh90 gtRXksBXk5tQBSV74JXUXbhEeOkzkEH+4b9Gm3l9crw4UBnAaFoGstMb3l1nz2mS+PWsCYXU 3Vouajkj7/Tvc1o2HsPpjSBHZDcfOXkT1w5Qsqy6GZ7qg+RFRgS+zS85EAibDYnwVbImJFGz a9F8aT1Y1YE1PGhHV43GErPPKmoVRS+EqU49wTnK6/veSpytG7hhlgYguIAjGbR2Qxyfrpo4 XhDSOPUentkMEdUu+MmKh6cMs9IoXSNsTmYF8ZhjoNxigcRH4nKi4G0Zfj1dhUWXaIADpfD1 7duYgs7pppba32412hkDYPawR5gDNOW8YLTAkMAo9ARuPLn6SYc6ZTi0tWGCHoYh75qIxXUo NateUmAvOu8xi6Z790gMcDy112LLtELD9I24RHGMJPzX7p8h6KpjlsPPB1vygdKacCdUGMzu odEMIo5e0JlDOapSTmcbj9oyvFqDkto2q1N69BF36vzX6N7ql8ZuUA4PRODPMMqLmqGgp/y5 6MUt83P1VP6dKNeQIyMpT0kzf5B5g0peHmGRZgQYXdGIb4wuIVtlAUTNdkkAABDyGhKlHca2 BX6IFqI2AqMpoXirJF3wCnQNZNoKeZoVYUhV3kYEubkE26qWMYIDUjCCA04CAQEwaDBVMQsw CQYDVQQGEwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMS8wLQYDVQQDEyZTd2lzc1NpZ24g UGVyc29uYWwgU2lsdmVyIENBIDIwMDggLSBHMgIPZMf0qavAT35f3t79FFcpMAkGBSsOAwIa BQCgggG/MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE0MDcw MjE4MzQyMVowIwYJKoZIhvcNAQkEMRYEFFadhsAYOMXlepisVNY3llNejAQeMGwGCSqGSIb3 DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG 9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwdwYJKwYB BAGCNxAEMWowaDBVMQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMS8wLQYD VQQDEyZTd2lzc1NpZ24gUGVyc29uYWwgU2lsdmVyIENBIDIwMDggLSBHMgIPZMf0qavAT35f 3t79FFcpMHkGCyqGSIb3DQEJEAILMWqgaDBVMQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dp c3NTaWduIEFHMS8wLQYDVQQDEyZTd2lzc1NpZ24gUGVyc29uYWwgU2lsdmVyIENBIDIwMDgg LSBHMgIPZMf0qavAT35f3t79FFcpMA0GCSqGSIb3DQEBAQUABIIBAF/UzzqI9m7GnWjk74mE I+HO1ip4yDSAkAqSf0jBadgjhP7ILc1hGOezvHikbRW3CIQRutCd5vWruriyAh+jMHWLdN98 Oyrr3hVcAiNnPi7OvvnXliWMMZh+4Qc83qVhsvvlwSCBvdBAhy/g8iaIcJUSxjjCSRimEr/H 5CCQg0naQMzeIdq2Uu6DN8pesiUXK/U0MNZebTrMRH6exHmvIlXFadBdV3qQTsEtJDAqOvVJ O2oN8LIjsHilKVCBArluh82QZnuTok+5ALAvyzodHQupvjLlommDgS9fbUX9jCV7c9XUSL/u 46zppg/6y5T6C70GUsuSFALQsUhCOuFZw2oAAAAAAAA= --------------ms030400000902040001090509--