diff --git a/web/api/index.php b/web/api/index.php
index 08f51fc9..949ac689 100644
--- a/web/api/index.php
+++ b/web/api/index.php
@@ -116,7 +116,7 @@ if (isset($_POST['user']) || isset($_POST['hash'])) {
     // Check command
     if ($cmd == "'v-make-tmp-file'") {
         // Used in DNS Cluster
-        $fp = fopen($_POST['arg2'], 'w');
+        $fp = fopen('/tmp/'.basename($_POST['arg2']), 'w');
         fwrite($fp, $_POST['arg1']."\n");
         fclose($fp);
         $return_var = 0;