From bfb496ca2934367355dd22ae665ed2f15785c2b7 Mon Sep 17 00:00:00 2001
From: Ilia Ross <ilia@ross.gdn>
Date: Mon, 26 Jan 2026 21:59:39 +0200
Subject: [PATCH] Fix temporary file upload directory

https://github.com/webmin/webmin/commit/e8e804ddcadb0ddae150c6576243157b828f568b#r175609008
---
 uptracker.cgi    | 2 +-
 web-lib-funcs.pl | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/uptracker.cgi b/uptracker.cgi
index ff18fcd6f..bfea70045 100755
--- a/uptracker.cgi
+++ b/uptracker.cgi
@@ -33,7 +33,7 @@ if ($in{'uid'}) {
 	$upfile = "$uinfo[7]/.tmp/upload.$id";
 	}
 else {
-	$upfile = &tempname_dir()."/upload.$id";
+	$upfile = "$ENV{'WEBMIN_VAR'}/uploads/upload.$id";
 	}
 
 # Read the tracker file in a loop until done, or until 1 minute has passed
diff --git a/web-lib-funcs.pl b/web-lib-funcs.pl
index a4f9b8aeb..4fea01e2c 100755
--- a/web-lib-funcs.pl
+++ b/web-lib-funcs.pl
@@ -1071,10 +1071,10 @@ if ($<) {
 	$vardir = "$uinfo[7]/.tmp";
 	}
 else {
-	$vardir = &tempname_dir();
+	$vardir = "$ENV{'WEBMIN_VAR'}/uploads";
 	}
 if (!-d $vardir) {
-	&make_dir($vardir, 0755);
+	&make_dir($vardir, 0750);
 	}
 
 # Remove any upload.* files more than 1 hour old