Currently temporary files are stored in a directory named after the user's sessionid. This value is not unique. There is a risk that a user could start another build and overwrite files in a tmp directory before a build is complete. Instead, use a UUID. This can be obtained either from a php extension or from mysql.