devel_themer_cleanup() doesn't check for ownership on temp files before attempting to delete them. On shared hosting, if any two sites run Devel without setting upload_tmp_dir(), this will generate E_WARNING messages ('unlink(/tmp/devel_themer_14019572574a8f2d12e01b0) [function.unlink]: Operation not permitted') as it attempts to delete the wrong users' files.

Comments

moshe weitzman’s picture

Project: Devel » Theme developer
Version: 6.x-1.18 » 6.x-1.x-dev
Component: devel_themer » Code
JeremyFrench’s picture

Status: Active » Closed (duplicate)

I am going to mark this as a duplicate of #647536: Theme developer creates too many files we need to change the creation and clean up scripts. I will make sure final fix takes care of this issue too.