move_uploaded_file does not set right permissions (ignores umask)

[Hark]

Binary package hint: php5

After calling move_uploaded_file a file should get permissions according to the set umask. When /tmp is on the same partition as the file's destination this doesn't happen, the file gets mode 600 making it unreadable by Apache.

I think this bug was introduced in an upgrade a few weeks maybe months ago.

This does remind me very much of an old (resolved) bug in PHP: http://bugs.php.net/bug.php?id=42291

[Andreas Olsson (andol)]

What versions of Ubuntu and PHP are involved?

Would it be possible to provide some example code where you use move_uploaded_file? Was a while ago since I wrote PHP code myself :)

[Andreas Olsson (andol)]

We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to "New". Thanks again!

[Nicolas (nicolasfr)]

Hi,

I am experiencing the same problem since I upgraded my server (I only upgraded a couple of week ago, the system is on production for about 6 months).

My server is running Ubuntu 8.04. The version of PHP5 I am using is:

root@hosting:~# php-cgi -v
PHP 5.2.4-2ubuntu5.5 with Suhosin-Patch 0.9.6.2 (cgi-fcgi) (built: Feb 11 2009 20:02:50)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies

Problem is: files uploaded through a PHP upload form and then moved with move_uploaded_file are given a umask of 0002 insted of 0022.

[Andreas Olsson (andol)]

Guess I shouldn't have been so eager to close this bug.

@Nicolas: Thanks for reopening it and providing the needed version information.

I can confirm this issue on Ubuntu 8.04 (libapache2-mod-php5: 5.2.4-2ubuntu5.5). As Hark mentions this bug only seems to affect the case when the php upload_tmp_dir is on the same file system as the file's destination.

The php versions in Ubuntu 8.10 and 9.04 seems to obey the set umask just fine.

[chrisf (chris-foerg)]

Hi,

is there any solution for Ubuntu 8.04 LTS?

Thanks,
Christian