#31757 [Opn->Bgs]: $_FILES['userfile']['name'] returns entire directory with IE
| From: | sniper@php.net | Date: | Mon, 31 Jan 2005 21:22:04 +0000 |
| Subject: | #31757 [Opn->Bgs]: $_FILES['userfile']['name'] returns entire directory with IE | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-73136@lists.php.net to get a copy of this message | ||
ID: 31757
Updated by: sniper@php.net
Reported By: andrew at eiknet dot com
-Status: Open
+Status: Bogus
Bug Type: *Directory/Filesystem functions
Operating System: RH Linux 8
PHP Version: 4CVS-2005-01-30 (stable)
New Comment:
IE bug -> report to Mickeysoft.
Previous Comments:
------------------------------------------------------------------------
[2005-01-31 18:05:27] fsolinas at it dot tiscali dot com
Reproduced after upgrading to 4.3.11-dev.
I'm using php4-STABLE-200501210930 due to bug #31398.
------------------------------------------------------------------------
[2005-01-30 07:27:45] none at null dot xxx
I don't think this is a bug in PHP, it's a questionable design feature
of IE. PHP is just returning the unmodified filename supplied by the
client as part of the upload process. If you wish to obtain just the
filename you should probably use basename($_FILES['userfile']['name']).
------------------------------------------------------------------------
[2005-01-30 01:01:27] andrew at eiknet dot com
Description:
------------
While uploading a file using a script the $_FILES['userfile']['name']
variable returns the entire upload path, but only when using IE. The
issue does not show up using Firefox.
Using IE:
$_FILES['userfile']['name'] -> C:\Documents and
Settings\RARankin\Desktop\groupe_alliance_2004_gb.jpg
Using Firefox:
$_FILES['userfile']['name'] -> groupe_alliance_2004_gb.jpg
Didnt happen before updating to 4.3.10+, I'm using a dev version due to
compilation errors w/ GD in *.10.
Error showed itself w/ phpBB's attachment modification.
Andrew
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=31757&edit=1