Bug #10049 Updated: Slashes passed thru a file upload

ID: 10049 Updated by: sniper Reported By: arnaud@cenet.fr Old Status: Open Status: Closed Bug Type: Feature/Change Request Operating System: Win98 / PWS 4.0 PHP Version: 4.0.4pl1 New Comment: This should be fixed in CVS now. You can try the latest development build from http://www.php4win.com/ but make sure it's dated after 27th of October 2001. Also, there are some minor leaks still in the new code. If you encounter such leaks, please send the shortest possible code + html with which you can reproduce the leak to php-dev@lists.php.net (or me) so we can get rid of these leaks. This fix will be in PHP 4.2.0. --Jani Previous Comments: ------------------------------------------------------------------------ [2001-03-29 03:55:30] arnaud@cenet.fr Maybe it's a not a bug but with Php 3.0.7 and PHP 4.0.2, when you upload a file, the file name is not stripslashed but in PHP4.0.4pl1, it is... That's confusing because I use a stripslashes function... Example : I upload "c:\windows\toto.txt" => PHP 3.0.8 and 4.0.2 : i get in the associated variable : "c:\\windows\\toto.txt" so I stripslash it... But in PHP 4.0.4pl1, i get "c:\windows\toto.txt" so when i stripslahs it, it can't find the file "c:windowstoto.txt"... I found a workaround but it's boring... That's all... ------------------------------------------------------------------------ Edit this bug report at http://bugs.php.net/?id=10049&edit=1