Zeev Suraski 6c4cb4c079 Security related updates: ...

- Introduce php_open_temporary_file(), in place of tempnam().  Still
  needs testing under UNIX (mkstemp()), works reliably under Windows now.
- Reimplement the mechanism for unlinking uploaded files at the end of the request
  (was it ever tested?).  Files moved with move_uploaded_file() will not be unlink()'d
  again, to avoid (albeit very unlikely) race conditions.

2000-09-09 11:41:14 +00:00

5.5 KiB

Raw Blame History

View Raw