[Tikiwiki-users] 0-length tmpfiles pollution

[Giancarlo <gia...@na...>]

tiki-edit_article.php:     $tmpfname = tempnam ($tmpDir, "TMPIMG").$imgname;

tiki-edit_article.php:     $tmpfname = tempnam ($tmpDir, "TMPIMG").$imgname;

tiki-edit_banner.php:     $tmpfname = tempnam ($tmpDir, 
"TMPIMG").$info["imageName"];

tiki-edit_banner.php:     $tmpfname = tempnam ($tmpDir , "TMPIMG").$imgname;

tiki-edit_submission.php:     $tmpfname = tempnam ($tmpDir, 
"TMPIMG").$imgname;

tiki-edit_submission.php:     $tmpfname = tempnam ($tmpDir, 
"TMPIMG").$imgname;

tiki-pick_avatar.php:    $tmpfname = tempnam ($tmpDir, "FOO").'.jpg';

tiki-upload_image.php:        $tmpfname = tempnam ($tmpDir, "FOO").'.jpg';

tiki-view_banner.php:   $tmpfname = tempnam ($tmpDir, 
"TMPIMG").$info["imageName"];

the php function tempnam() does not only returna  files name, it 
actually creates one.

so

$name=tempnam("/tmp","FOO").".jpg";

creates file /tmp/FOOxxxx(0 length) and returns "FOOxxxx.jpg"

the latter gets used by the app, and probably unlinked somewhere.
the former remains there and fills up the temp dir

If a different tempdir than the system one is defined in general 
preferences, this will fill up with 0 length files, owned by the apache 
process.

Giancarlo