[darcs-users] darcs patch: Spaces and punctuation in upload.cgi. (and 5 more)

[Trent W. Buck]

"Dmitry Kurochkin" <dmitry.kurochkin at gmail.com> writes:
> AFAIK several instances of a CGI script can run simultaneously. So we
> need to use unique temporary directories for patch testing.

It is advisable (for security reasons) to avoid predictable locations of
temporary directories in any case, at least in sticky places like /tmp.

In bash, this is achieved with $TMPDIR and the mktemp(1) command.  I
believe this uses mkstemp(3) internally, as the older mktemp(3) is
insecure.