From bb7b529c294bb8f74ed955286be0f59aca62ed51 Mon Sep 17 00:00:00 2001
From: baconseed <baconseed>
Date: Sat, 29 Sep 2012 17:01:28 +0100
Subject: [PATCH] Fix #2112 : World readable tmp directory in json_api

---
 deluge/ui/web/json_api.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/deluge/ui/web/json_api.py b/deluge/ui/web/json_api.py
index 533b6c2ea..23fb31840 100644
--- a/deluge/ui/web/json_api.py
+++ b/deluge/ui/web/json_api.py
@@ -664,7 +664,8 @@ class WebApi(JSONComponent):
                 log.error("Reason: %s", result.getErrorMessage())
             return result
 
-        tmp_file = os.path.join(tempfile.gettempdir(), url.split("/")[-1])
+        tempdir = tempfile.mkdtemp(prefix="delugeweb-")
+        tmp_file = os.path.join(tempdir, url.split("/")[-1])
         log.debug("filename: %s", tmp_file)
         headers = {}
         if cookie: