Nginx + FPM PHP: where the uploaded files are sent? And tmp dir security

Question

I need to know where the uploaded files are sent when a user upload a file like an image through php. The files are writen direct to de destination directory in scripts or they uploaded to an tmp dir? In this case, would be nice if tmp dir were mounted with flags noexec and nosuid. With FPM PHP and NGINX, this is necessary?

Thank you.

The question where to find, [see](http://php.net/manual/en/ini.core.php#ini.upload-tmp-dir) — Rhim, Jul 31 '14 at 16:40
when I list the content of the directory /tmp while I upload an file, the dir is showing empty. PS: the script is run as user that owner directory. — Augusto Will, Aug 08 '14 at 18:14
possible duplicate of [NGINX + PHP-FPM tmp dir](http://stackoverflow.com/questions/25271496/nginx-php-fpm-tmp-dir) — Maxxer, Nov 06 '14 at 10:49

score 0 · Answer 1 · answered Aug 11 '14 at 02:27

0

I change the var tmp_upload_dir and when a file is uploaded, the directory still empty.

answered Aug 11 '14 at 02:27

Augusto Will

562
7
20

Nginx + FPM PHP: where the uploaded files are sent? And tmp dir security

1 Answers1