Re: cvs: php4 / NEWS

That's really weird, as I didn't change any of the logic... It appears to be working for me. Are you absolutely sure you got the latest version? BTW, as far as I can tell, Rasmus's initial fix didn't work, as it protected $foo_name (which is the original file name, as it was typed in the form), as opposed to $foo, which is the name of the temporary file on the server (which users are likely to manipulate/display). Zeev At 23:53 04/09/2000, Jani Taskinen wrote:

On Mon, 4 Sep 2000, Zeev Suraski wrote: Sigh, I fixed it again :I Should be right this time. Okay, now it doesn't segfault, but gives me an error with code that worked before this hassle: Warning: Unable to open 'Array' for reading: No such file or directory in So it give now an array as result from file upload?? --Jani At 23:36 04/09/2000, Jani Taskinen wrote:

This 'fix' causes segfault when you hit submit button in any form with file-inputs. --Jani On Mon, 4 Sep 2000, Zeev Suraski wrote:

zeev           Mon Sep  4 13:33:33 2000 EDT

Modified files:

   /php4      NEWS

Log: update NEWS Index: php4/NEWS diff -u php4/NEWS:1.423 php4/NEWS:1.424

--- php4/NEWS:1.423    Sun Sep  3 18:09:09 2000

+++ php4/NEWS Mon Sep 4 13:33:33 2000 @@ -2,6 +2,7 @@

|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||

?? ??? 2000, Version 4.0.3-dev +- Fixed a potential security issue with HTTP file upload (Zeev) - Add the Sablotron extension for XSL parsing. (Sterling) - Fixed a bug in checkdate() which caused < 1 years to be valid (Jani) - Added support for an optional output handler function for output

-- Joo.

-- Zeev Suraski <zeev@zend.com> http://www.zend.com/ -- Joo.

-- Zeev Suraski <zeev@zend.com> http://www.zend.com/