#40813 [Asn]: upload filename
ID: 40813
Updated by: edink@php.net
Reported By: gianluca dot gimigliano at interno dot it
Status: Assigned
Bug Type: *Web Server problem
Operating System: Windows XP
PHP Version: 5.2.1
Assigned To: iliaa
New Comment:
I the meanwhile you can set
magic_quotes_gpc=off
in your php.ini which will avoid this problem if your code does not
depend on the magic_quotes (which it shouldn't anyway),
Previous Comments:
------------------------------------------------------------------------
[2007-03-17 00:42:11] tony2001@php.net
Ilia, please take a look at this issue.
It's your patch causes this behaviour:
http://cvs.php.net/viewvc.cgi/php-src/main/rfc1867.c?view=diff&r1=1.168&r2=1.169
The last #ifdef PHP_WIN32 doesn't look right, did it get there by
mistake?
------------------------------------------------------------------------
[2007-03-15 14:19:25] gianluca dot gimigliano at interno dot it
With this apache version:
Apache Version Apache/2.2.4 (Win32) mod_ssl/2.2.4 OpenSSL/0.9.8d
PHP/5.2.2-dev
The prolem is the same
------------------------------------------------------------------------
[2007-03-15 13:02:30] tony2001@php.net
Please try using this CVS snapshot:
http://snaps.php.net/php5.2-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php5.2-win32-latest.zip
------------------------------------------------------------------------
[2007-03-15 09:47:54] gianluca dot gimigliano at interno dot it
Description:
------------
When you try to upload a file with the character:' in the name,
the uploaded file name is read from the ' position.
Reproduce code:
---------------
<html><head></head>
<body>
<?
if ($_FILES['uploaded']) echo $_FILES['uploaded']['name'];
?>
<form method="post" enctype="multipart/form-data">
<input name="uploaded" type="file">
<input name="send" type="submit" value="send">
</form>
</body>
</html>
Expected result:
----------------
If the uploaded file name is: special'ized.doc
The correct output is: special'ized.doc
Actual result:
--------------
If the uploaded file name is: special'ized.doc
The real output is: ized.doc
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=40813&edit=1
Thread (6 messages)