From b413bb2b6022a67ae87d1f21ef20158400c6365d Mon Sep 17 00:00:00 2001 From: Thomas Bruederli Date: Wed, 10 Apr 2013 23:38:50 +0200 Subject: Set minimal permissions to temp files (#148899) --- plugins/filesystem_attachments/filesystem_attachments.php | 1 + 1 file changed, 1 insertion(+) (limited to 'plugins/filesystem_attachments') diff --git a/plugins/filesystem_attachments/filesystem_attachments.php b/plugins/filesystem_attachments/filesystem_attachments.php index fa147795f..063f6d5e4 100644 --- a/plugins/filesystem_attachments/filesystem_attachments.php +++ b/plugins/filesystem_attachments/filesystem_attachments.php @@ -60,6 +60,7 @@ class filesystem_attachments extends rcube_plugin $args['id'] = $this->file_id(); $args['path'] = $tmpfname; $args['status'] = true; + @chmod($tmpfname, 0600); // set correct permissions (#148899) // Note the file for later cleanup $_SESSION['plugins']['filesystem_attachments'][$group][] = $tmpfname; -- cgit v1.2.3