? streamwrapper-D7-10.patch
? streamwrapper-D7-8.patch
? streamwrapper-D7-9.patch
? modules/simpletest/tests/file-streamwrapper-tests
? sites/chsc-drupal.dev.peytz.dk
Index: includes/bootstrap.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/bootstrap.inc,v
retrieving revision 1.227
diff -u -9 -p -r1.227 bootstrap.inc
--- includes/bootstrap.inc	19 Sep 2008 07:53:59 -0000	1.227
+++ includes/bootstrap.inc	19 Sep 2008 22:04:26 -0000
@@ -1,12 +1,16 @@
 <?php
 // $Id: bootstrap.inc,v 1.227 2008/09/19 07:53:59 dries Exp $
 
+// THIS SHOULD NOT BE COMMITTED!
+require_once './modules/simpletest/tests/file.dummystreamwrapper.inc';
+stream_wrapper_register('dummy-stream-wrapper', 'FileDummyStreamWrapper');
+
 /**
  * @file
  * Functions that need to be loaded on every Drupal request.
  */
 
 /**
  * Indicates that the item should never be removed unless explicitly told to
  * using cache_clear_all() with a cache ID.
  */
Index: includes/file.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/file.inc,v
retrieving revision 1.134
diff -u -9 -p -r1.134 file.inc
--- includes/file.inc	19 Sep 2008 03:40:32 -0000	1.134
+++ includes/file.inc	19 Sep 2008 22:04:26 -0000
@@ -149,19 +149,19 @@ function file_create_path($destination =
  *   require the user to specify a writable directory. If it can't be made to
  *   work, a form error will be set preventing them from saving the settings.
  * @return FALSE when directory not found, or TRUE when directory exists.
  */
 function file_check_directory(&$directory, $mode = FALSE, $form_item = NULL) {
   $directory = rtrim($directory, '/\\');
 
   // Check if directory exists.
   if (!is_dir($directory)) {
-    if (($mode & FILE_CREATE_DIRECTORY) && @mkdir($directory)) {
+    if (($mode & FILE_CREATE_DIRECTORY) && @mkdir($directory, 0775)) {
       @chmod($directory, 0775); // Necessary for non-webserver users.
     }
     else {
       if ($form_item) {
         form_set_error($form_item, t('The directory %directory does not exist.', array('%directory' => $directory)));
         watchdog('file system', 'The directory %directory does not exist.', array('%directory' => $directory), WATCHDOG_ERROR);
       }
       return FALSE;
     }
@@ -178,19 +178,19 @@ function file_check_directory(&$director
       }
       return FALSE;
     }
   }
 
   if ((file_directory_path() == $directory || file_directory_temp() == $directory) && !is_file("$directory/.htaccess")) {
     $htaccess_lines = "SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006\nOptions None\nOptions +FollowSymLinks";
     if (($fp = fopen("$directory/.htaccess", 'w')) && fputs($fp, $htaccess_lines)) {
       fclose($fp);
-      chmod($directory . '/.htaccess', 0664);
+      @chmod($directory . '/.htaccess', 0664);
     }
     else {
       $variables = array('%directory' => $directory, '!htaccess' => '<br />' . nl2br(check_plain($htaccess_lines)));
       form_set_error($form_item, t("Security warning: Couldn't write .htaccess file. Please create a .htaccess file in your %directory directory which contains the following lines: <code>!htaccess</code>", $variables));
       watchdog('security', "Security warning: Couldn't write .htaccess file. Please create a .htaccess file in your %directory directory which contains the following lines: <code>!htaccess</code>", $variables, WATCHDOG_ERROR);
     }
   }
 
   return TRUE;
@@ -232,27 +232,32 @@ function file_check_path(&$path) {
  *   file_check_location('/www/example.com/files/../../../etc/passwd', '/www/example.com/files');
  * @endcode
  *
  * @param $source A string set to the file to check.
  * @param $directory A string where the file should be located.
  * @return FALSE if the path does not exist in the directory;
  *   otherwise, the real path of the source.
  */
 function file_check_location($source, $directory = '') {
-  $check = realpath($source);
+  $check = drupal_realpath($source);
   if ($check) {
     $source = $check;
   }
   else {
+    // drupal_realpath() does not always resolve '/..'
+    $basename = basename($source);
+    if ($basename == '..') {
+      return FALSE;
+    }
     // This file does not yet exist.
-    $source = realpath(dirname($source)) . '/' . basename($source);
+    $source = drupal_realpath(dirname($source)) . '/' . $basename;
   }
-  $directory = realpath($directory);
+  $directory = drupal_realpath($directory);
   if ($directory && strpos($source, $directory) !== 0) {
     return FALSE;
   }
   return $source;
 }
 
 /**
  * Copy a file to a new location.
  *
@@ -273,19 +278,19 @@ function file_check_location($source, $d
  *   Replace behavior when the destination file already exists:
  *   - FILE_EXISTS_REPLACE - Replace the existing file.
  *   - FILE_EXISTS_RENAME - Append _{incrementing number} until the filename is
  *                          unique.
  *   - FILE_EXISTS_ERROR - Do nothing and return FALSE.
  * @return
  *   The path to the new file, or FALSE in the event of an error.
  */
 function file_copy($source, $destination = NULL, $replace = FILE_EXISTS_RENAME) {
-  $source = realpath($source);
+  $source = drupal_realpath($source);
   if (!file_exists($source)) {
     drupal_set_message(t('The specified file %file could not be copied, because no file by that name exists. Please check that you supplied the correct filename.', array('%file' => $source)), 'error');
     return FALSE;
   }
 
   $destination = file_create_path($destination);
   $directory = $destination;
   $basename = file_check_path($directory);
 
@@ -301,19 +306,19 @@ function file_copy($source, $destination
   $destination = file_destination($directory . '/' . $basename, $replace);
 
   if ($destination === FALSE) {
     drupal_set_message(t('The specified file %file could not be copied because a file by that name already exists in the destination.', array('%file' => $source)), 'error');
     return FALSE;
   }
   // Make sure source and destination filenames are not the same, makes no
   // sense to copy it if they are. In fact copying the file will most likely
   // result in a 0 byte file. Which is bad. Real bad.
-  if ($source == realpath($destination)) {
+  if ($source == drupal_realpath($destination)) {
     drupal_set_message(t('The specified file %file was not copied because it would overwrite itself.', array('%file' => $source)), 'error');
     return FALSE;
   }
   if (!@copy($source, $destination)) {
     drupal_set_message(t('The specified file %file could not be copied.', array('%file' => $source)), 'error');
     return FALSE;
   }
 
   // Give everyone read access so that FTP'd users or
@@ -1015,19 +1020,22 @@ function file_scan_directory($dir, $mask
     }
 
     closedir($handle);
   }
 
   return $files;
 }
 
 /**
- * Determine the default temporary directory.
+ * Determine the default temporary directory. This may be used for storing
+ * temporary files within a single request.
+ * If a temporary file is to be used in several requests, it should be saved in
+ * file_directory_path with its status set to FILE_STATUS_TEMPORARY.
  *
  * @return A string containing a temp directory.
  */
 function file_directory_temp() {
   $temporary_directory = variable_get('file_directory_temp', NULL);
 
   if (is_null($temporary_directory)) {
     $directories = array();
 
@@ -1453,11 +1461,69 @@ function file_get_mimetype($filename, $m
     if (preg_match('!\.('. $ext_preg .')$!i', $filename)) {
       return $mime_match;
     }
   }
 
   return 'application/octet-stream';
 }
 
 /**
+ * Check whether the path uses a wrapper prefix, e.g. "foo://".
+ *
+ * @param $path
+ *   A string containing a path to a file or directory.
+ * @return
+ *   TRUE if path contains a wrapper prefix, FALSE otherwise.
+ */
+function file_is_wrapper($path) {
+  // A wrapper prefix is at least two characters so that it can be distinguised
+  // from a Windows drive letter, "C:/temp"?.
+  return preg_match('@^([a-z0-9.+-]{2,})://@i', $path);
+}
+
+/**
+ * Get canonicalized absolute path of a file or directory. The Windows path
+ * separator "\" is converted to "/", and consecutive "/" characters are stripped.
+ * If path is a directory, the trailing "/" is stripped.
+ * For regular files:
+ * - Symbolic links are expanded.
+ * - "/./" and "/../" segments are resolved.
+ * For paths with protocol/wrapper prefix (e.g. "mywrapper://foo/bar.txt"):
+ * - Paths containing "/../" are blocked (FALSE is returned).
+ * - Paths are assumed to be case-sensitive (no case normalization is done).
+ *
+ * @code
+ *   // Returns "/foo/bar/boo", or FALSE if the file does not exist:
+ *   drupal_realpath('/foo//bar/./baz/..\\boo');
+ *
+ *   // Returns FALSE due to "/../":
+ *   drupal_realpath('mywrapper://foo/bar/../baz');
+ * @endcode
+ *
+ * @param $path
+ *   A string containing a path to a file or directory.
+ * @return
+ *   A string containing the absolute path to the file/directory, or FALSE if
+ *   the file/directory does not exist.
+ */
+function drupal_realpath($path) {
+  // Does $path include an explicit protocol/wrapper prefix "foo://" (not a
+  // Windows drive letter "C:/temp")?
+  if (preg_match('@^([a-z0-9.+-]{2,})://(.*)@i', $path, $reg)) {
+    // Replace "\" and "//" with "/", except when "//" is preceded by a colon
+    // (this indicates a nested stream wrapper prefix, e.g. "foo://bar://".
+    $wrappedPath = preg_replace('@(?<!:)[/\\\\]+@', '/', $reg[2]);
+    // Look for ".." separated by "/" or string boundary
+    if (preg_match('@(?<=^|/)\.\.(?=/|$)@', $wrappedPath)) {
+      return FALSE;
+    }
+    $path = $reg[1] . '://' . $wrappedPath;
+    return file_exists($path) ? rtrim($path, '/') : FALSE;
+  }
+  else {
+    return realpath($path);
+  }
+}
+
+/**
  * @} End of "defgroup file".
  */
Index: modules/color/color.module
===================================================================
RCS file: /cvs/drupal/drupal/modules/color/color.module,v
retrieving revision 1.46
diff -u -9 -p -r1.46 color.module
--- modules/color/color.module	19 Sep 2008 07:53:59 -0000	1.46
+++ modules/color/color.module	19 Sep 2008 22:04:26 -0000
@@ -491,19 +491,19 @@ function _color_render_images($theme, &$
       imagecopy($slice, $target, 0, 0, $x, $y, $width, $height);
     }
 
     // Save image.
     imagepng($slice, $image);
     imagedestroy($slice);
     $paths['files'][] = $image;
 
     // Set standard file permissions for webserver-generated files
-    @chmod(realpath($image), 0664);
+    @chmod(drupal_realpath($image), 0664);
 
     // Build before/after map of image paths.
     $paths['map'][$file] = $base;
   }
 
   // Clean up target buffer.
   imagedestroy($target);
 }
 
Index: modules/simpletest/drupal_web_test_case.php
===================================================================
RCS file: /cvs/drupal/drupal/modules/simpletest/drupal_web_test_case.php,v
retrieving revision 1.42
diff -u -9 -p -r1.42 drupal_web_test_case.php
--- modules/simpletest/drupal_web_test_case.php	19 Sep 2008 02:47:38 -0000	1.42
+++ modules/simpletest/drupal_web_test_case.php	19 Sep 2008 22:04:26 -0000
@@ -710,19 +710,21 @@ class DrupalWebTestCase {
     $this->checkPermissions(array(), TRUE);
 
     // Restore necessary variables.
     variable_set('install_profile', 'default');
     variable_set('install_task', 'profile-finished');
     variable_set('clean_url', $clean_url_original);
 
     // Use temporary files directory with the same prefix as database.
     $this->original_file_directory = file_directory_path();
-    variable_set('file_directory_path', file_directory_path() . '/' . $db_prefix);
+    // THIS SHOULD NOT BE COMMITTED!
+    variable_set('file_directory_path', 'dummy-stream-wrapper://' . file_directory_path() . '/' . $db_prefix);
+    variable_set('file_downloads', FILE_DOWNLOADS_PRIVATE);
     file_check_directory(file_directory_path(), TRUE); // Create the files directory.
   }
 
   /**
    * Refresh the in-memory set of variables. Useful after a page request is made
    * that changes a variable in a different thread.
    *
    * In other words calling a settings page with $this->drupalPost() with a changed
    * value would update a variable to reflect that change, but in the thread that
@@ -918,42 +920,71 @@ class DrupalWebTestCase {
     if ($this->parse()) {
       $edit_save = $edit;
       // Let's iterate over all the forms.
       $forms = $this->xpath('//form');
       foreach ($forms as $form) {
         // We try to set the fields of this form as specified in $edit.
         $edit = $edit_save;
         $post = array();
         $upload = array();
+        $temp_dir = FALSE;
         $submit_matches = $this->handleForm($post, $edit, $upload, $submit, $form);
         $action = isset($form['action']) ? $this->getAbsoluteUrl($form['action']) : $this->getUrl();
 
         // We post only if we managed to handle every field in edit and the
         // submit button matches.
         if (!$edit && $submit_matches) {
           if ($upload) {
             // TODO: cURL handles file uploads for us, but the implementation
             // is broken. This is a less than elegant workaround. Alternatives
             // are being explored at #253506.
             foreach ($upload as $key => $file) {
-              $post[$key] = '@' . realpath($file);
+              // cURL does not support stream wrappers
+              if (file_is_wrapper($file)) {
+                $temp_dir = file_directory_temp() . '/simpletest_drupal_web_test_case';
+                if (!is_dir($temp_dir)) {
+                  mkdir($temp_dir);
+                }
+                $upload_file = $temp_dir . '/' . basename($file);
+                copy($file, $upload_file);
+                if (!is_file($upload_file)) {
+                  $this->fail(t('Failed to create temporary file @file', array('@file' => $upload_file)));
+                  return;
+                }
+              }
+              else {
+                $upload_file = realpath($file);
+              }
+              $post[$key] = '@' . $upload_file;
             }
           }
           else {
             foreach ($post as $key => $value) {
               // Encode according to application/x-www-form-urlencoded
               // Both names and values needs to be urlencoded, according to
               // http://www.w3.org/TR/html4/interact/forms.html#h-17.13.4.1
               $post[$key] = urlencode($key) . '=' . urlencode($value);
             }
             $post = implode('&', $post);
           }
           $out = $this->curlExec(array(CURLOPT_URL => $action, CURLOPT_POST => TRUE, CURLOPT_POSTFIELDS => $post, CURLOPT_HEADER => FALSE));
+
+          // Remove temporary directory and its contents.
+          if ($temp_dir) {
+            $files = scandir($temp_dir);
+            foreach ($files as $file) {
+              if ($file != '.' && $file != '..') {
+                file_delete($temp_dir . '/' . $file);
+              }
+            }
+            rmdir($temp_dir);
+          }
+
           // Ensure that any changes to variables in the other thread are picked up.
           $this->refreshVariables();
           return $out;
         }
       }
       // We have not found a form which contained all fields of $edit.
       foreach ($edit as $name => $value) {
         $this->fail(t('Failed to set field @name to @value', array('@name' => $name, '@value' => $value)));
       }
Index: modules/simpletest/tests/file.dummystreamwrapper.inc
===================================================================
RCS file: modules/simpletest/tests/file.dummystreamwrapper.inc
diff -N modules/simpletest/tests/file.dummystreamwrapper.inc
--- /dev/null	1 Jan 1970 00:00:00 -0000
+++ modules/simpletest/tests/file.dummystreamwrapper.inc	19 Sep 2008 22:04:26 -0000
@@ -0,0 +1,284 @@
+<?php
+// $Id: file.dummystreamwrapper.inc,v 1.1 2008/05/05 18:23:31 foo Exp $
+
+/**
+ * @file
+ * Dummy stream wrapper used for testing stream wrapper support.
+ */
+
+/*
+ * Dummy stream wrapper that stores its files with the path found by stripping
+ * the wrapper prefix. E.g. "dummy-wrapper:///tmp/foo" maps to "/tmp/foo".
+ * Nested wrappers are also supported, e.g. "dummy-wrapper://mywrapper://foo.txt"
+ * maps to "mywrapper://foo.txt".
+ *
+ * The class implements the methods required by PHP's stream_wrapper_register().
+ */
+class FileDummyStreamWrapper {
+  /**
+   * A file handle to the nested file opened by stream_open().
+   */
+  private $fileHandle;
+
+  /**
+   * A directory handle to the nested file opened by dir_opendir().
+   */
+  private $directoryHandle;
+
+  /**
+   * Support for fopen(), file_get_contents(), file_put_contents() etc.
+   *
+   * @param $path
+   *   A string containing the path to the file to open.
+   * @param $mode
+   *   The file mode ("r", "wb" etc.).
+   * @param $options
+   *   A bit mask of STREAM_USE_PATH and STREAM_REPORT_ERRORS.
+   * @param &$opened_path
+   *   A string containing the path actually opened.
+   * @return
+   *  TRUE if file was opened successfully.
+   */
+  public function stream_open($path, $mode, $options, &$opened_path) {
+     $nestedPath = self::getNestedPath($path);
+    if ($options & STREAM_REPORT_ERRORS) {
+      $this->fileHandle = fopen($nestedPath, $mode);
+    } else {
+      $this->fileHandle = @fopen($nestedPath, $mode);
+    }
+    return (bool) $this->fileHandle;
+  }
+
+  /**
+   * Support for fread(), file_get_contents() etc.
+   *
+   * @param $count
+   *    Maximum number of bytes to be read.
+   * @return
+   *  The string that was read, or FALSE in case of an error.
+   */
+  public function stream_read($count) {
+    return fread($this->fileHandle, $count);
+  }
+
+  /**
+   * Support for fwrite(), file_put_contents() etc.
+   *
+   * @param $data
+   *   The string to be written.
+   * @return
+   *   The number of bytes written.
+   */
+  public function stream_write($data) {
+    return fwrite($this->fileHandle, $data);
+  }
+
+  /**
+   * Support for feof().
+   *
+   * @return
+   *   TRUE if end-of-file has been reached.
+   */
+  public function stream_eof() {
+    return feof($this->fileHandle);
+  }
+
+  /**
+   * Support for fseek().
+   * 
+   * @param $offset
+   *   The byte offset to got to.
+   * @param $whence
+   *   SEEK_SET, SEEK_CUR, or SEEK_END.
+   * @return
+   *   TRUE on success
+   */
+  public function stream_seek($offset, $whence) {
+    return fseek($this->fileHandle, $offset, $whence);
+  }
+
+  /**
+   * Support for fflush().
+   *
+   * @return
+   *   TRUE if data was successfully stored (or there was no data to store).
+   */
+  public function stream_flush() {
+    return fflush($this->fileHandle);
+  }
+
+  /**
+   * Support for ftell().
+   *
+   * @return
+   *   The current offset in bytes from the beginning of file.
+   */
+  public function stream_tell() {
+    return ftell($this->fileHandle);
+  }
+
+  /**
+   * Support for fstat().
+   *
+   * @return
+   *   An array with file status, or FALSE in case of an error - see fstat()
+   *   for a description of this array.
+   */
+  public function stream_stat() {
+    return fstat($this->fileHandle);
+  }
+
+  /**
+   * Support for fclose().
+   *
+   * @return
+   *   TRUE if stream was successfully closed.
+   */
+  public function stream_close() {
+    return fclose($this->fileHandle);
+  }
+
+  /**
+   * Support for unlink().
+   *
+   * @param $path
+   *   A string containing the path to the file to delete.
+   * @return
+   *   TRUE if file was successfully deleted.
+   */
+  public function unlink($path) {
+    return unlink(self::getNestedPath($path));
+  }
+
+  /**
+   * Support for rename().
+   *
+   * @param $fromPath
+   *   The path to the file to rename.
+   * @param $toPath
+   *   The new path to the file.
+   *
+   * @return
+   *   TRUE if file was successfully renamed.
+   */
+  public function rename($fromPath, $toPath) {
+    return rename(self::getNestedPath($fromPath), self::getNestedPath($toPath));
+  }
+
+  /**
+   * Support for mkdir().
+   *
+   * @param $path
+   *   A string containing the path to the directory to create.
+   * @param $mode
+   *   Permission flags - see mkdir().
+   * @param $options
+   *   A bit mask of STREAM_REPORT_ERRORS and STREAM_MKDIR_RECURSIVE.
+   * @return
+   *   TRUE if directory was successfully created.
+   */
+  public function mkdir($path, $mode, $options) {
+    $nestedPath = self::getNestedPath($path);
+    $recursive = (bool) $options & STREAM_MKDIR_RECURSIVE;
+    if ($options & STREAM_REPORT_ERRORS) {
+        return mkdir($nestedPath, $mode, $recursive);
+    } else {
+      return @mkdir($nestedPath, $mode, $recursive);
+    }
+  }
+
+  /**
+   * Support for rmdir().
+   *
+   * @param $path
+   *   A string containing the path to the directory to delete.
+   * @param $options
+   *   A bit mask of STREAM_REPORT_ERRORS.
+   * @return
+   *   TRUE if directory was successfully removed.
+   */
+  public function rmdir($path, $options) {
+    $nestedPath = self::getNestedPath($path);
+    if ($options & STREAM_REPORT_ERRORS) {
+      return rmdir($nestedPath);
+    } else {
+      return @rmdir($nestedPath);
+    }
+  }
+
+  /**
+   * Support for stat().
+   *
+   * @param $path
+   *   A string containing the path to get information about.
+   * @param $flags
+   *   A bit mask of STREAM_URL_STAT_LINK and STREAM_URL_STAT_QUIET.
+   * @return
+   *   An array with file status, or FALSE in case of an error - see fstat()
+   *   for a description of this array.
+   */
+  public function url_stat($path, $flags) {
+      $nestedPath = self::getNestedPath($path);
+      return ($flags & STREAM_URL_STAT_QUIET)
+          ? (file_exists($nestedPath) ? stat($nestedPath) : FALSE)
+          : stat($nestedPath);
+  }
+
+  /**
+   * Support for opendir().
+   *
+   * @param $path
+   *   A string containing the path to the directory to open.
+   * @param $options
+   *   Unknown (parameter is not documented in PHP Manual).
+   * @return
+   *   TRUE on success.
+   */
+  public function dir_opendir($path, $options) {
+    $this->dirHandle = opendir(self::getNestedPath($path));
+    return (bool) $this->dirHandle;
+  }
+
+  /**
+   * Support for readdir().
+   *
+   * @return
+   *   The next filename, or FALSE if there are no more files in the directory.
+   */
+  public function dir_readdir() {
+    return readdir($this->dirHandle);
+  }
+
+  /**
+   * Support for rewinddir().
+   *
+   * @return
+   *   TRUE on success.
+   */
+  public function dir_rewinddir() {
+    return rewinddir($this->dirHandle);
+  }
+
+  /**
+   * Support for closedir().
+   *
+   * @return
+   *   TRUE on success.
+   */
+  public function dir_closedir() {
+    return closedir($this->dirHandle);
+  }
+
+  /**
+   * Strip the stream wrapper prefix from the specified path.
+   *
+   * @param $path
+   *    A string containing a path with a stream wrapper prefix.
+   * @return
+   *    The without a stream wrapper prefix.
+   */
+  private static function getNestedPath($path) {
+    return preg_replace('@^([a-z0-9.+-]{2,})://@i', '', $path);
+  }
+}
+
Index: modules/simpletest/tests/file.test
===================================================================
RCS file: /cvs/drupal/drupal/modules/simpletest/tests/file.test,v
retrieving revision 1.4
diff -u -9 -p -r1.4 file.test
--- modules/simpletest/tests/file.test	17 Sep 2008 07:11:58 -0000	1.4
+++ modules/simpletest/tests/file.test	19 Sep 2008 22:04:26 -0000
@@ -103,29 +103,29 @@ class FileValidateTest extends DrupalWeb
     $errors = file_validate_image_resolution($this->image, 0, '1x200');
     $this->assertEqual(count($errors), 1, t("Got an error for an image that wasn't tall enough"), 'File');
     $errors = file_validate_image_resolution($this->image, 0, '200x200');
     $this->assertEqual(count($errors), 1, t("Small images report an error."), 'File');
 
     // Maximum size
     if (image_get_toolkit()) {
       // Copy the image so that the original doesn't get resized.
       $temp_dir = file_directory_temp();
-      copy(realpath('misc/druplicon.png'), realpath($temp_dir) .'/druplicon.png');
+      copy(drupal_realpath('misc/druplicon.png'), drupal_realpath($temp_dir) .'/druplicon.png');
       $this->image->filepath = $temp_dir .'/druplicon.png';
 
       $errors = file_validate_image_resolution($this->image, '10x5');
       $this->assertEqual(count($errors), 0, t("No errors should be reported when an oversized image can be scaled down."), 'File');
 
       $info = image_get_info($this->image->filepath);
       $this->assertTrue($info['width'] <= 10, t("Image scaled to correct width."), 'File');
       $this->assertTrue($info['height'] <= 5, t("Image scaled to correct height."), 'File');
 
-      unlink(realpath($temp_dir .'/druplicon.png'));
+      unlink(drupal_realpath($temp_dir .'/druplicon.png'));
     }
     else {
       // TODO: should check that the error is returned if no toolkit is available.
       $errors = file_validate_image_resolution($this->image, '5x10');
       $this->assertEqual(count($errors), 1, t("Oversize images that can't be scaled get an error."), 'File');
     }
 
     // Clear out any resizing messages.
     drupal_get_messages();
@@ -211,26 +211,26 @@ class FileLoadSaveTest extends DrupalWeb
   }
 
   function testFileSaveData() {
     $contents = $this->randomName(8);
 
     // No filename
     $filepath = file_save_data($contents);
     $this->assertTrue($filepath, t("Unnamed file saved correctly"));
     $this->assertEqual(file_directory_path(), dirname($filepath), t("File was placed in Drupal's files directory"));
-    $this->assertEqual($contents, file_get_contents(realpath($filepath)), t("Contents of the file are correct."));
+    $this->assertEqual($contents, file_get_contents(drupal_realpath($filepath)), t("Contents of the file are correct."));
 
     // Provide a filename
     $filepath = file_save_data($contents, 'asdf.txt', FILE_EXISTS_REPLACE);
     $this->assertTrue($filepath, t("Unnamed file saved correctly"));
     $this->assertEqual(file_directory_path(), dirname($filepath), t("File was placed in Drupal's files directory."));
     $this->assertEqual('asdf.txt', basename($filepath), t("File was named correctly."));
-    $this->assertEqual($contents, file_get_contents(realpath($filepath)), t("Contents of the file are correct."));
+    $this->assertEqual($contents, file_get_contents(drupal_realpath($filepath)), t("Contents of the file are correct."));
   }
 }
 
 /**
  * Directory related tests.
  */
 class FileDirectoryTest extends DrupalWebTestCase {
   /**
    * Implementation of getInfo().
@@ -267,26 +267,29 @@ class FileDirectoryTest extends DrupalWe
     $errors = form_get_errors();
     $this->assertEqual($errors[$form_element], t('The directory %directory does not exist.', array('%directory' => $this->directory)), t("Properly generated an error for the passed form element."), 'File');
 
     // make a directory
     $this->assertTrue(file_check_directory($this->directory, FILE_CREATE_DIRECTORY), t("No error reported when creating a new directory"), 'File');
 
     // make sure directory actually exists
     $this->assertTrue(is_dir($this->directory), t("Directory actually exists"), 'File');
 
-    // make directory read only
-    @chmod($this->directory, 0444);
-    $form_element = $this->randomName();
-    $this->assertFalse(file_check_directory($this->directory, 0, $form_element), t("Error reported for a non-writeable directory"), 'File');
-
-    // check if form error was set
-    $errors = form_get_errors();
-    $this->assertEqual($errors[$form_element], t('The directory %directory is not writable', array('%directory' => $this->directory)), t("Properly generated an error for the passed form element."), 'File');
+    // chmod() does not support stream wrappers.
+    if (!file_is_wrapper($this->directory)) {
+      // make directory read only
+      @chmod($this->directory, 0444);
+      $form_element = $this->randomName();
+      $this->assertFalse(file_check_directory($this->directory, 0, $form_element), t("Error reported for a non-writeable directory"), 'File');
+
+      // check if form error was set
+      $errors = form_get_errors();
+      $this->assertEqual($errors[$form_element], t('The directory %directory is not writable', array('%directory' => $this->directory)), t("Properly generated an error for the passed form element."), 'File');
+    }
 
     // test directory permission modification
     $this->assertTrue(file_check_directory($this->directory, FILE_MODIFY_PERMISSIONS), t("No error reported when making directory writeable."), 'File');
 
     // verify directory actually is writeable
     $this->assertTrue(is_writeable($this->directory), t("Directory is writeable"), 'File');
 
     // remove .htaccess file to then test the writing of .htaccess file
     @unlink(file_directory_path() .'/.htaccess');
@@ -385,18 +388,20 @@ class FileDirectoryTest extends DrupalWe
     $this->assertEqual($path, $destination, t("Non-existing filepath destination is correct with FILE_EXISTS_ERROR."), 'File');
 
     $destination = 'misc/druplicon.png';
     $path = file_destination($destination, FILE_EXISTS_REPLACE);
     $this->assertEqual($path, $destination, t("Existing filepath destination remains the same with FILE_EXISTS_REPLACE."), 'File');
     $path = file_destination($destination, FILE_EXISTS_RENAME);
     $this->assertNotEqual($path, $destination, t("A new filepath destination is created when filepath destination already exists with FILE_EXISTS_RENAME."), 'File');
     $path = file_destination($destination, FILE_EXISTS_ERROR);
     $this->assertEqual($path, FALSE, t("An error is returned when filepath destination already exists with FILE_EXISTS_ERROR."), 'File');
+
+    drupal_get_messages();
   }
 }
 
 
 /**
  * Deletion related tests
  */
 class FileCopyDeleteMoveTest extends DrupalWebTestCase {
   /**
@@ -419,19 +424,19 @@ class FileCopyDeleteMoveTest extends Dru
 
     // A directory to operate on.
     $this->dirname = file_directory_path() . '/' . $this->randomName();
     mkdir($this->dirname);
 
     // Create a file for testing
     $f = new stdClass();
     $f->filepath = file_directory_path() . '/' . $this->randomName();
     $f->filename = basename($f->filepath);
-    touch($f->filepath);
+    file_put_contents($f->filepath, 'x');
     $f->filemime = 'text/plain';
     $f->uid = 1;
     $f->timestamp = REQUEST_TIME;
     $f->filesize = 0;
     drupal_write_record('files', $f);
     $this->file = $f;
   }
 
   function testFileDelete() {
@@ -460,19 +465,19 @@ class FileCopyDeleteMoveTest extends Dru
     $new_filepath = file_move($this->file->filepath, $desired_filepath, FILE_EXISTS_ERROR);
     $this->assertTrue($new_filepath, t("Move was successful."));
     $this->assertEqual($new_filepath, $desired_filepath, t("Returned expected filepath."));
     $this->assertTrue(file_exists($new_filepath), t("File exists at the new location."));
     $this->assertFalse(file_exists($this->file->filepath), t("No file remains at the old location."));
 
     // Moving with rename.
     $desired_filepath = file_directory_path() . '/' . $this->randomName();
     $this->assertTrue(file_exists($new_filepath), t("File exists before moving."));
-    $this->assertTrue(touch($desired_filepath), t('Created a file so a rename will have to happen.'));
+    $this->assertTrue(file_put_contents($desired_filepath, 'x'), t('Created a file so a rename will have to happen.'));
     $newer_filepath = file_move($new_filepath, $desired_filepath, FILE_EXISTS_RENAME);
     $this->assertTrue($newer_filepath, t("Move was successful."));
     $this->assertNotEqual($newer_filepath, $desired_filepath, t("Returned expected filepath."));
     $this->assertTrue(file_exists($newer_filepath), t("File exists at the new location."));
     $this->assertFalse(file_exists($new_filepath), t("No file remains at the old location."));
 
     // TODO: test moving to a directory (rather than full directory/file path)
   }
 
@@ -506,19 +511,19 @@ class FileCopyDeleteMoveTest extends Dru
     $desired_filepath = file_directory_path() . '/' . $this->randomName();
     $new_filepath = file_copy($this->file->filepath, $desired_filepath, FILE_EXISTS_ERROR);
     $this->assertTrue($new_filepath, t("Copy was successful."));
     $this->assertEqual($new_filepath, $desired_filepath, t("Returned expected filepath."));
     $this->assertTrue(file_exists($this->file->filepath), t("Original file remains."));
     $this->assertTrue(file_exists($new_filepath), t("New file exists."));
 
     // Copying with rename.
     $desired_filepath = file_directory_path() . '/' . $this->randomName();
-    $this->assertTrue(touch($desired_filepath), t('Created a file so a rename will have to happen.'));
+    $this->assertTrue(file_put_contents($desired_filepath, 'x'), t('Created a file so a rename will have to happen.'));
     $newer_filepath = file_copy($new_filepath, $desired_filepath, FILE_EXISTS_RENAME);
     $this->assertTrue($newer_filepath, t("Copy was successful."));
     $this->assertNotEqual($newer_filepath, $desired_filepath, t("Returned expected filepath."));
     $this->assertTrue(file_exists($this->file->filepath), t("Original file remains."));
     $this->assertTrue(file_exists($new_filepath), t("New file exists."));
 
     // TODO: test copying to a directory (rather than full directory/file path)
   }
 
Index: modules/simpletest/tests/registry.test
===================================================================
RCS file: /cvs/drupal/drupal/modules/simpletest/tests/registry.test,v
retrieving revision 1.1
diff -u -9 -p -r1.1 registry.test
--- modules/simpletest/tests/registry.test	14 Aug 2008 09:18:28 -0000	1.1
+++ modules/simpletest/tests/registry.test	19 Sep 2008 22:04:26 -0000
@@ -97,18 +97,24 @@ class RegistryParseFilesTestCase extends
         }
       }
     }
   }
 
   /**
    * testRegistryParseFiles
    */
   function testRegistryParseFiles() {
+    // Only files in the filesystem ever need to be parsed using registry
+    // functions. Stream wrappers are not supported.
+    if (file_is_wrapper(file_directory_path())) {
+      return;
+    }
+
     _registry_parse_files($this->getFiles());
     foreach ($this->fileTypes as $fileType) {
       // Test that we have all the right resources.
       foreach (array('functionName', 'className', 'interfaceName') as $resource) {
         $foundName = db_result(db_query("SELECT name FROM {registry} WHERE name = '%s'", $this->$fileType->$resource));
         $this->assertTrue($this->$fileType->$resource == $foundName, t('Resource "@resource" found.', array('@resource' => $this->$fileType->$resource)));
       }
       // Test that we have the right md5.
       $md5 = db_result(db_query("SELECT md5 FROM {registry_file} WHERE filename = '%s'", './' . $this->$fileType->fileName));
Index: modules/system/image.gd.inc
===================================================================
RCS file: /cvs/drupal/drupal/modules/system/image.gd.inc,v
retrieving revision 1.2
diff -u -9 -p -r1.2 image.gd.inc
--- modules/system/image.gd.inc	16 Jul 2008 21:59:28 -0000	1.2
+++ modules/system/image.gd.inc	19 Sep 2008 22:04:26 -0000
@@ -190,32 +190,40 @@ function image_gd_open($file, $extension
   return $open_func($file);
 }
 
 /**
  * GD helper to write an image resource to a destination file.
  *
  * @param $res
  *   An image resource created with image_gd_open().
  * @param $destination
- *   A string file path where the iamge should be saved.
+ *   A string file path where the image should be saved.
  * @param $extension
  *   A string containing one of the following extensions: gif, jpg, jpeg, png.
  * @return
  *   Boolean indicating success.
  */
 function image_gd_close($res, $destination, $extension) {
   $extension = str_replace('jpg', 'jpeg', $extension);
   $close_func = 'image' . $extension;
   if (!function_exists($close_func)) {
     return FALSE;
   }
+
+  // These functions do not support stream wrappers.
+  $output_file = file_is_wrapper($destination) ? tempnam(drupal_realpath(file_directory_temp()), 'image') : $destination;
   if ($extension == 'jpeg') {
-    return $close_func($res, $destination, variable_get('image_jpeg_quality', 75));
+    $ok = $close_func($res, $output_file, variable_get('image_jpeg_quality', 75));
   }
   else {
-    return $close_func($res, $destination);
+    $ok = $close_func($res, $output_file);
+  }
+
+  if ($ok && $destination != $output_file) {
+    $ok = file_move($output_file, $destination, FILE_EXISTS_REPLACE);
   }
+  return $ok;
 }
 
 /**
  * @} End of "ingroup image".
  */
Index: modules/system/system.admin.inc
===================================================================
RCS file: /cvs/drupal/drupal/modules/system/system.admin.inc,v
retrieving revision 1.89
diff -u -9 -p -r1.89 system.admin.inc
--- modules/system/system.admin.inc	17 Sep 2008 07:11:58 -0000	1.89
+++ modules/system/system.admin.inc	19 Sep 2008 22:04:26 -0000
@@ -1457,19 +1457,19 @@ function system_file_system_settings() {
     '#description' => t('A file system path where the files will be stored. This directory must exist and be writable by Drupal. If the download method is set to public, this directory must be relative to the Drupal installation directory and be accessible over the web. If the download method is set to private, this directory should not be accessible over the web. Changing this location will modify all download paths and may cause unexpected problems on an existing site.'),
     '#after_build' => array('system_check_directory'),
   );
 
   $form['file_directory_temp'] = array(
     '#type' => 'textfield',
     '#title' => t('Temporary directory'),
     '#default_value' => file_directory_temp(),
     '#maxlength' => 255,
-    '#description' => t('A file system path where uploaded files will be stored during previews.'),
+    '#description' => t('A file system path where temporary files may be stored.'),
     '#after_build' => array('system_check_directory'),
   );
 
   $form['file_downloads'] = array(
     '#type' => 'radios',
     '#title' => t('Download method'),
     '#default_value' => variable_get('file_downloads', FILE_DOWNLOADS_PUBLIC),
     '#options' => array(FILE_DOWNLOADS_PUBLIC => t('Public - files are available using HTTP directly.'), FILE_DOWNLOADS_PRIVATE => t('Private - files are transferred by Drupal.')),
     '#description' => t('Choose the <em>Public download</em> method unless you wish to enforce fine-grained access controls over file downloads. Changing the download method will modify all download paths and may cause unexpected problems on an existing site.')
Index: modules/upload/upload.test
===================================================================
RCS file: /cvs/drupal/drupal/modules/upload/upload.test,v
retrieving revision 1.4
diff -u -9 -p -r1.4 upload.test
--- modules/upload/upload.test	15 Sep 2008 09:28:50 -0000	1.4
+++ modules/upload/upload.test	19 Sep 2008 22:04:26 -0000
@@ -44,20 +44,20 @@ class UploadTestCase extends DrupalWebTe
     $files = array(current($text_files)->filename, next($text_files)->filename);
 
     $this->uploadFile($node, $files[0]);
     $this->uploadFile($node, $files[1]);
 
     // Check to see that uploaded file is listed and actually accessible.
     $this->assertText(basename($files[0]), basename($files[0]) . ' found on node.');
     $this->assertText(basename($files[1]), basename($files[1]) . ' found on node.');
 
-    $this->checkUploadedFile(basename($files[0]));
-    $this->checkUploadedFile(basename($files[1]));
+    $this->checkUploadedFile($files[0]);
+    $this->checkUploadedFile($files[1]);
 
     // Fetch db record and use fid to rename and delete file.
     $upload = db_fetch_object(db_query('SELECT fid, description FROM {upload} WHERE nid = %d', array($node->nid)));
     if ($upload) {
       // Rename file.
       $edit = array();
       $edit['files[' . $upload->fid . '][description]'] = $new_name = substr($upload->description, 1);
       $this->drupalPost('node/' . $node->nid . '/edit', $edit, t('Save'));
       $this->assertRaw(t('Page %title has been updated.', array('%title' => $node->title)), 'File renamed successfully.');
@@ -66,19 +66,19 @@ class UploadTestCase extends DrupalWebTe
       $this->assertNoText($upload->description, $upload->description . ' not found on node.');
 
       // Delete a file.
       $edit = array();
       $edit['files[' . $upload->fid . '][remove]'] = TRUE;
       $this->drupalPost('node/' . $node->nid . '/edit', $edit, t('Save'));
       $this->assertRaw(t('Page %title has been updated.', array('%title' => $node->title)), 'File deleted successfully.');
 
       $this->assertNoText($new_name, $new_name . ' not found on node.');
-      $this->drupalGet(file_directory_path() . '/' . $upload->description);
+      $this->drupalGet(file_create_url($upload->description));
       $this->assertResponse(array(404), 'Uploaded ' . $upload->description . ' is not accessible.');
     }
     else {
       $this->fail('File upload record not found in database.');
     }
   }
 
   /**
    * Ensure the the file filter works correctly by attempting to upload a non-allowed file extension.
@@ -173,21 +173,21 @@ class UploadTestCase extends DrupalWebTe
       $this->assertRaw(t('Page %title has been updated.', array('%title' => $node->title)), 'File attached successfully.');
     }
   }
 
   /**
    * Check that uploaded file is accessible and verify the contents against the original.
    *
    * @param string $filename Name of file to verifiy.
    */
-  function checkUploadedFile($filename) {
-    $file = realpath(file_directory_path() . '/' . $filename);
-    $this->drupalGet(file_directory_path() . '/' . $filename);
+  function checkUploadedFile($file) {
+    $filename = basename($file);
+    $this->drupalGet(file_create_url($filename));
     $this->assertResponse(array(200), 'Uploaded ' . $filename . ' is accessible.');
     $this->assertEqual(file_get_contents($file), $this->drupalGetContent(), 'Uploaded contents of ' . $filename . ' verified.');
   }
 
   /**
    * Get the role id of the 'simpletest' role associated with a SimpleTest test user.
    *
    * @param object $user User object.
    * @return interger SimpleTest role id.
Index: modules/user/user.test
===================================================================
RCS file: /cvs/drupal/drupal/modules/user/user.test,v
retrieving revision 1.14
diff -u -9 -p -r1.14 user.test
--- modules/user/user.test	17 Sep 2008 07:11:59 -0000	1.14
+++ modules/user/user.test	19 Sep 2008 22:04:26 -0000
@@ -385,19 +385,19 @@ class UserPictureTestCase extends Drupal
       // restore one and set another
       $test_dim = ($info['width'] + 10) . 'x' . ($info['height'] + 10);
       $test_size = floor(filesize($image->filename) / 1000) + 1;
       variable_set('user_picture_dimensions', $test_dim);
       variable_set('user_picture_file_size', $test_size);
 
       $pic_path = $this->saveUserPicture($image);
 
       // check if image is displayed in user's profile page
-      $this->assertRaw($pic_path, t("Image is displayed in user's profile page"));
+      $this->assertRaw(basename($pic_path), t("Image is displayed in user's profile page"));
 
       // check if file is located in proper directory
       $this->assertTrue(is_file($pic_path), t('File is located in proper directory'));
     }
   }
 
   function saveUserPicture($image) {
     $edit = array('files[picture_upload]' => realpath($image->filename));
     $this->drupalPost('user/' . $this->user->uid.'/edit', $edit, t('Save'));
