View Issue Details

IDProjectCategoryView StatusLast Update
0011591mantisbtadministrationpublic2010-09-19 03:13
Reportertk Assigned Torolfkleef  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionduplicate 
Product Version1.2.0 
Summary0011591: admin/move_db2disk.php: data loss due to filename overwrite, $g_attachments_file_permissions not used
Description

Used "Move Attachments to Disk" after years and found that this system tool still leads to data loss due to overwritten files since in admin/move_db2disk.php function upgrade_move_att2disk the filenames on disk are not made unique like in core/file_api.php (implemented via function file_generate_unique_name).

Note: this error has already been noted several times, e.g., in 0007176, 0009495, 0005836 -- please fix.
This tool is only required every now and then, but when you stumble over that problem during a major mantis upgrade you can really get into trouble as an admin.

Furthermore, upgrade_move_att2disk does not apply the file permissions as specified in $g_attachments_file_permissions.

TagsNo tags attached.

Relationships

duplicate of 0007176 closeddregad Move Attachments to Disk: data loss due to filename overwrite 

Activities

rolfkleef

rolfkleef

2010-06-11 14:12

reporter   ~0025816

Hi tk - I'm closing this as "duplicate", and just attached a patch for 1.2.x to issue 0007176