PHP 4.0 Bug #9014: Content-Type included in uploaded files
| From: | sveinrn at hotmail dot com | Date: | Tue, 30 Jan 2001 22:49:43 +0000 |
| Subject: | PHP 4.0 Bug #9014: Content-Type included in uploaded files | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-45385@lists.php.net to get a copy of this message | ||
From: sveinrn@hotmail.com
Operating system: RedHat 7
PHP version: 4.0.4pl1
PHP Bug Type: HTTP related
Bug description: Content-Type included in uploaded files
I am using RedHat 7 with all the latest bugfixes and security fixes ("up2date -u").
This weekend I updated to RedHat's latest PHP version, and now all files I upload is longer
than they should have been and includes a line at the top that looks like "Content-Type:
image/pjpeg" plus a blank line.
Here is the shortest possible script ("upload.php3") to display the behaviour:
<HTLM><BODY>
<FORM ENCTYPE="multipart/form-data" ACTION="upload.php3" METHOD=POST>
<INPUT TYPE="hidden" name="MAX_FILE_SIZE" value="100000">
Send this file: <INPUT NAME="userfile" TYPE="file">
<INPUT TYPE="submit" VALUE="Send File">
</FORM>
<?
echo "\$userfile=".$userfile."<br>";
echo "\$userfile_name=".$userfile_name."<br>";
echo "\$userfile_size=".$userfile_size."<br>";
echo "\$userfile_type=".$userfile_type."<br>";
echo "is_uploaded_file=".is_uploaded_file($userfile)."<br>";
copy($userfile, "testfile");
?>
</BODY></HTML>
Here is the output produced for a sample jpeg of 41052 bytes:
$userfile=/tmp/phpHaOmjN
$userfile_name=J0144216.JPG
$userfile_size=41081
$userfile_type=
is_uploaded_file=1
As you can see, the file is 29 bytes longer than it should be...
Here is what I get when pressing the "send file" button without specifying a filename:
$userfile=/tmp/phpJryFlz
$userfile_name=
$userfile_size=42
$userfile_type=
is_uploaded_file=1
The file "uploaded" looks like this:
*** cut here ***
Content-Type: application/octet-stream
*** cut here ***
It seems to me that the content type description is ending up in the uploaded file rather than in
the _type variable? I have changed my config files as little as possible, and I can't imagine I
have been able to do something this stupid all on my own?
Svein Roar Nilsen
--
Edit Bug report at: http://bugs.php.net/?id=9014&edit=1