Ticket #10224: 10224.diff

wp-admin/includes/file.php

@@ -167 +167 @@
 function wp_tempnam($filename = '', $dir = ''){
         if ( empty($dir) )
                 $dir = get_temp_dir();
-        $filename = basename($filename);
-        if ( empty($filename) )
-                $filename = time();
+        $filename = md5($filename . time()) . '.tmp';
 
         $filename = $dir . wp_unique_filename($dir, $filename);
         touch($filename);