PHP function not working well

fatepower

Hi ppls 🙂

Hoply someone can help me with this error.
I run a CentOS 5 server with WHM/Cpanel, the problem is when a user on my host use the function "move_uploaded_file" they get written in the uploaded dir with the permission 600 and not 644 as they should be. Yea i know that this can be fixed with a chmod(); function added into the script. But thats not a good solution cuz my host users want to use their scripts and i can't say all the time edit the source code and add a chmod(); function for the file uploads so they get chmod 644 permission after upload. I now that this can be solved in some way, my old server was a managed server and all was pre-installed and there the "move_uploaded_file();" function worked well with writing the files in to the upload-dir with chmod 644, but for me on this server it writes the uploaded file with the permission of 600 :/.

Does anyone know?

Cheers

YAOMK

Someone here might be able to help you out, but maybe you'll get a faster answer by posting in a more specialized forum like http://linuxquestions.org

NogDog

You may need to set the Apache user's umask setting to 022.

fatepower

umask allready setted to 022, for the profile for the hosting accounts and default but running
#umaks
resaults:
0022

but the problem is still there :/

Cheers

NogDog

fatepower wrote:
umask allready setted to 022, for the profile for the hosting accounts and default but running
#umaks
resaults:
0022

but the problem is still there :/

Cheers

Just to make sure, I was referring to the specific user account under which Apache runs, typically called "nobody" or "www", not the login accounts of your site's users. This is because PHP web page scripts are executed by the Apache user, not by the script file owner (at least with most typical Apache/PHP configurations they are).

Sorry if that is what you meant and I'm just repeating myself, but I figured it was worth making sure since I might not have been entirely clear about it in my first post.

fatepower

Yes u have correct about that, cuz apache is "nobody" it will not have access to the files who been uploaded with the function move_uploaded_file cuz it get setted a chmod to 600 instead of 644, The mkstemp() function generates a unique temporary filename from template.The file is then created with mode read/write and permissions 0666 (glibc 2.0.6 and earlier), 0600 (glibc 2.0.7 and later). As my server is allways up to date i run glibc > 2.0.7. The problem seems to bee in the function "move_uploaded_file" when u are on a system who just have on fdisk created (as me, on a vps based on virtouzzo). Don't know why this problem accure with the function move_uploaded_file but if u change that to copy it creats the files with right permission (644). As that is a problem, cuz i can't say to all my VPS users that they need to change the function "move_uploaded_file" to copy all the time it must be a wrok around on some way.