#31757 [Com]: $_FILES['userfile']['name'] returns entire directory with IE
| From: | fsolinas at it dot tiscali dot com | Date: | Mon, 31 Jan 2005 17:05:28 +0000 |
| Subject: | #31757 [Com]: $_FILES['userfile']['name'] returns entire directory with IE | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-73125@lists.php.net to get a copy of this message | ||
ID: 31757
Comment by: fsolinas at it dot tiscali dot com
Reported By: andrew at eiknet dot com
Status: Open
Bug Type: *Directory/Filesystem functions
Operating System: RH Linux 8
PHP Version: 4CVS-2005-01-30 (stable)
New Comment:
Reproduced after upgrading to 4.3.11-dev.
I'm using php4-STABLE-200501210930 due to bug #31398.
Previous Comments:
------------------------------------------------------------------------
[2005-01-30 07:27:45] none at null dot xxx
I don't think this is a bug in PHP, it's a questionable design feature
of IE. PHP is just returning the unmodified filename supplied by the
client as part of the upload process. If you wish to obtain just the
filename you should probably use basename($_FILES['userfile']['name']).
------------------------------------------------------------------------
[2005-01-30 01:01:27] andrew at eiknet dot com
Description:
------------
While uploading a file using a script the $_FILES['userfile']['name']
variable returns the entire upload path, but only when using IE. The
issue does not show up using Firefox.
Using IE:
$_FILES['userfile']['name'] -> C:\Documents and
Settings\RARankin\Desktop\groupe_alliance_2004_gb.jpg
Using Firefox:
$_FILES['userfile']['name'] -> groupe_alliance_2004_gb.jpg
Didnt happen before updating to 4.3.10+, I'm using a dev version due to
compilation errors w/ GD in *.10.
Error showed itself w/ phpBB's attachment modification.
Andrew
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=31757&edit=1