Re: Truncation of uploaded file names at backslash

Try the latest CVS snapshot from http://snaps.php.net/ as rfc1867.c has been rewritten in it and should fix this problem too. --Jani On Mon, 12 Nov 2001, Duncan Gibb wrote: >Hello > >First let me apologise in case I've raised this question in the wrong >place. It seemed too difficult for the general users mailing list but >not a big enough issue to file a bug report. > >In main/rfc1867.c, the function php_mime_split() deliberately truncates >the filename string containing the client-side name of an uploaded file, >preserving only the portion right of the rightmost backslash. This >means the application script won't see the client-side filename as >passed by the browser. > >I think I know why this has been done (because IE stupidly passes the >complete client-side path, rather than just the file _name_), but IMVHO >it is a mis-feature to impose an MS-DOS/Windows filename restriction on >the server side (\ is valid in filenames on Mac and Unix). What do you >folks think about this? Was it imposed for another reason? > > >The reason I came upon this is I am looking at porting an existing ASP >(spit) application which includes a file storage area. One of the >problems we have with the ASP/WinNT system is that it doesn't deal well >with client-side filenames. We want to preserve but platform-proof >filenames. So we need to get our hands on the whole filename and then >replace dangerous characters like \ with less dangerous ones. > >Is there another way to retreive the string as passed by the browser, or >do I need to comment out a few lines and re-compile? > > >Also (OT, sorry), does anyone happen to know how IE for Mac behaves? >Does it pass the full path of uploaded file (with colons?) or just the >filename? Or some other random Microsoft junk? > > >Thanks > > >Duncan > > >