In d5-file_save_upload files are moved to their destination by file_move(using file_copy) which sets the file permissions to 664 to make it readable by everyone.

In d6-file_save_upload files are moved to their destination by move_uploaded_file which does not change the default permissions(600).

CommentFileSizeAuthor
file.inc_.664.patch556 bytesufku

Comments

drewish’s picture

drewish commented
Status: Needs review » Closed (duplicate)

see #203204: Uploaded files have the permissions set to 600