Index: en/reference/filesystem/functions/move-uploaded-file.xml =================================================================== RCS file: /repository/phpdoc/en/reference/filesystem/functions/move-uploaded-file.xml,v retrieving revision 1.7 diff -u -p -r1.7 move-uploaded-file.xml --- en/reference/filesystem/functions/move-uploaded-file.xml 15 Sep 2007 02:44:00 -0000 1.7 +++ en/reference/filesystem/functions/move-uploaded-file.xml 2 Dec 2007 14:44:33 -0000 @@ -21,10 +21,13 @@ destination. - This sort of check is especially important if there is any chance - that anything done with uploaded files could reveal their - contents to the user, or even to other users on the same - system. + An important difference between rename and + move_uploaded_file is that the upload directory + doesn't have to be exposed through + open_basedir in order to move an + uploaded file. Hence, a malicious user being able to inject + filename won't be able to access files uploaded by + other requests.