Oops, forgot to change the attachfile to filename.

yep. ./tmp exists and is writable. i have also tried it as world writable (777).