Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

--TEST-- Test tempnam() function: usage variations - obscure prefixes --SKIPIF-- <?php if(..

Decoded Output download

--TEST--
Test tempnam() function: usage variations - obscure prefixes
--SKIPIF--
<?php
if(substr(PHP_OS, 0, 3) != "WIN")
    die("skip run only on Windows");
?>
--CONFLICTS--
obscure_filename
--FILE--
<?php
/* Passing invalid/non-existing args for $prefix */

echo "*** Testing tempnam() with obscure prefixes ***
";
$file_path = __DIR__."/tempnamVar3";
if (!mkdir($file_path)) {
    echo "Failed, cannot create temp dir $filepath
";
    exit(1);
}

$file_path = realpath($file_path);

/* An array of prefixes */
$names_arr = array(
    /* Valid args (casting)*/
    -1,
    TRUE,
    FALSE,
    "",
    " ",
    "",
    /* Invalid args */
    array(),

    /* Valid args*/
    /* prefix with path separator of a non existing directory*/
    "/no/such/file/dir",
    "php/php"
);

$res_arr = array(
    /* Invalid args */
    true,
    true,
    true,
    true,
    true,
    true,
    false,

    /* prefix with path separator of a non existing directory*/
    true,
    true
);

for( $i=0; $i<count($names_arr); $i++ ) {
    echo "-- Iteration $i --
";
    try {
        $file_name = tempnam($file_path, $names_arr[$i]);
    } catch (Error $e) {
        echo $e->getMessage(), "
";
        continue;
    }

    /* creating the files in existing dir */
    if (file_exists($file_name) && !$res_arr[$i]) {
        echo "Failed
";
    }
    if ($res_arr[$i]) {
        $file_dir = dirname($file_name);
        if (realpath($file_dir) == $file_path || realpath($file_dir . "\") == $file_path) {
            echo "OK
";
        } else {
            echo "Failed, not created in the correct directory " . realpath($file_dir) . ' vs ' . $file_path ."
";
        }

        if (!is_writable($file_name)) {
            printf("%o
", fileperms($file_name) );

        }
    } else {
        echo "OK
";
    }
    @unlink($file_name);
}

rmdir($file_path);
?>
--EXPECTF--
*** Testing tempnam() with obscure prefixes ***
-- Iteration 0 --
OK
-- Iteration 1 --
OK
-- Iteration 2 --
OK
-- Iteration 3 --
OK
-- Iteration 4 --

Notice: tempnam(): file created in the system's temporary directory in %stempnam_variation3-win32.php on line %d
Failed, not created in the correct directory %s vs %s
0
-- Iteration 5 --
tempnam(): Argument #2 ($prefix) must not contain any null bytes
-- Iteration 6 --
tempnam(): Argument #2 ($prefix) must be of type string, array given
-- Iteration 7 --
OK
-- Iteration 8 --
OK

Did this file decode correctly?

Original Code

--TEST--
Test tempnam() function: usage variations - obscure prefixes
--SKIPIF--
<?php
if(substr(PHP_OS, 0, 3) != "WIN")
    die("skip run only on Windows");
?>
--CONFLICTS--
obscure_filename
--FILE--
<?php
/* Passing invalid/non-existing args for $prefix */

echo "*** Testing tempnam() with obscure prefixes ***\n";
$file_path = __DIR__."/tempnamVar3";
if (!mkdir($file_path)) {
    echo "Failed, cannot create temp dir $filepath\n";
    exit(1);
}

$file_path = realpath($file_path);

/* An array of prefixes */
$names_arr = array(
    /* Valid args (casting)*/
    -1,
    TRUE,
    FALSE,
    "",
    " ",
    "\0",
    /* Invalid args */
    array(),

    /* Valid args*/
    /* prefix with path separator of a non existing directory*/
    "/no/such/file/dir",
    "php/php"
);

$res_arr = array(
    /* Invalid args */
    true,
    true,
    true,
    true,
    true,
    true,
    false,

    /* prefix with path separator of a non existing directory*/
    true,
    true
);

for( $i=0; $i<count($names_arr); $i++ ) {
    echo "-- Iteration $i --\n";
    try {
        $file_name = tempnam($file_path, $names_arr[$i]);
    } catch (Error $e) {
        echo $e->getMessage(), "\n";
        continue;
    }

    /* creating the files in existing dir */
    if (file_exists($file_name) && !$res_arr[$i]) {
        echo "Failed\n";
    }
    if ($res_arr[$i]) {
        $file_dir = dirname($file_name);
        if (realpath($file_dir) == $file_path || realpath($file_dir . "\\") == $file_path) {
            echo "OK\n";
        } else {
            echo "Failed, not created in the correct directory " . realpath($file_dir) . ' vs ' . $file_path ."\n";
        }

        if (!is_writable($file_name)) {
            printf("%o\n", fileperms($file_name) );

        }
    } else {
        echo "OK\n";
    }
    @unlink($file_name);
}

rmdir($file_path);
?>
--EXPECTF--
*** Testing tempnam() with obscure prefixes ***
-- Iteration 0 --
OK
-- Iteration 1 --
OK
-- Iteration 2 --
OK
-- Iteration 3 --
OK
-- Iteration 4 --

Notice: tempnam(): file created in the system's temporary directory in %stempnam_variation3-win32.php on line %d
Failed, not created in the correct directory %s vs %s
0
-- Iteration 5 --
tempnam(): Argument #2 ($prefix) must not contain any null bytes
-- Iteration 6 --
tempnam(): Argument #2 ($prefix) must be of type string, array given
-- Iteration 7 --
OK
-- Iteration 8 --
OK

Function Calls

None

Variables

None

Stats

MD5 8054f93ff737d47f9538cbbe570dd80e
Eval Count 0
Decode Time 94 ms