Misleading note about move_uploaded_file() open_basedir awareness

[tmsholy]

The manual page: https://php.net/function.move-uploaded-file contains a note which states:

move_uploaded_file() is open_basedir aware. However, restrictions are placed only on the to path

While this is true, if the from path is not in open_basedir, the file is moved, but it generates a warning in the error log:

PHP Warning: move_uploaded_file(): open_basedir restriction in effect. File(/tmp/phpBxHkjL) is not within the allowed path(s): (/var/www/uploads/)

Tested on PHP 8.2.5

[damianwadley]

This shouldn't be a documentation issue: open_basedir is to prevent access to unauthorized files, but PHP accounts for that during move_uploaded_file by checking the source was an uploaded file.