#43008 [Opn->Asn]: php://filter uris ignore url encoded filternames and can't handle slashes

ID: 43008 Updated by: jani@php.net Reported By: php at benjaminschulz dot com -Status: Open +Status: Assigned Bug Type: Streams related Operating System: linux PHP Version: 5.3CVS-2007-10-17 (CVS) Assigned To: hholzgra Previous Comments: ------------------------------------------------------------------------ [2008-03-17 23:42:28] php at benjaminschulz dot com This should work because otherwise there is no way to pass valid and existing filternames as URIs to PHP. (This bug is approved by hartmut btw.) ------------------------------------------------------------------------ [2008-03-17 20:53:31] jani@php.net And this should work because..? (IMO, it's expected, you pass invalid data -> you get an error..simple.) ------------------------------------------------------------------------ [2008-03-10 14:55:17] php at benjaminschulz dot com If the filtername is not URL encoded than i get this: Warning: readfile(): unable to create or locate filter "convert.iconv.ISO-8859-15" in ... Warning: readfile(): Unable to create filter (convert.iconv.ISO-8859-15) in ... Warning: readfile(): unable to locate filter "UTF-8" in ... Warning: readfile(): Unable to create filter (UTF-8) in ... ------------------------------------------------------------------------ [2007-10-17 17:04:40] php at benjaminschulz dot com Description: ------------ because filternames can contain slashes (convert.iconv.from-enc/to-enc) it should be possible to pass URL-encodet filternames to php://filter Reproduce code: --------------- <?php $str = 'php://filter/read=convert.iconv.ISO-8859-15%2FUTF-8/resource=data://text/plain,foobar'; ^ url encoded slash Expected result: ---------------- string(6) "foobar" Actual result: -------------- Warning: file_get_contents(): unable to create or locate filter "convert.iconv.ISO-8859-15%2FUTF-8" in /var/www/foo/a.php on line 34 Warning: file_get_contents(): Unable to create filter (convert.iconv.ISO-8859-15%2FUTF-8) in /var/www/foo/a.php on line 34 ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=43008&edit=1