Repository navigation
Misleading note about move_uploaded_file() open_basedir awareness #11138
Description
The manual page: https://php.net/function.move-uploaded-file contains a note which states:
move_uploaded_file() is open_basedir aware. However, restrictions are placed only on the to path
While this is true, if the from path is not in open_basedir, the file is moved, but it generates a warning in the error log:
PHP Warning: move_uploaded_file(): open_basedir restriction in effect. File(/tmp/phpBxHkjL) is not within the allowed path(s): (/var/www/uploads/)
Tested on PHP 8.2.5
Activity
damianwadley commentedon Apr 26, 2023
This shouldn't be a documentation issue: open_basedir is to prevent access to unauthorized files, but PHP accounts for that during move_uploaded_file by checking the source was an uploaded file.
Propagate STREAM_DISABLE_OPEN_BASEDIR src flag to php_stream_stat_pat…
Propagate STREAM_DISABLE_OPEN_BASEDIR src flag to php_stream_stat_pat…