Doc #66677 [Com]: CURLOPT_SAFE_UPLOAD missing from curl_setopt docs
Edit report at https://bugs.php.net/bug.php?id=66677&edit=1
ID: 66677
Comment by: kawewong at gmail dot com
Reported by: steffen dot weber at gmail dot com
Summary: CURLOPT_SAFE_UPLOAD missing from curl_setopt docs
Status: Closed
Type: Documentation Problem
Package: cURL related
Operating System: Linux
PHP Version: 5.5.9
Assigned To: cmb
Block user comment: N
Private report: N
New Comment:
There is no document about this in English version.
Found in Spanish ( https://www.php.net/manual/es/function.curl-setopt.php
), Chinese ( https://www.php.net/manual/zh/function.curl-setopt.php
).
Previous Comments:
------------------------------------------------------------------------
[2015-01-08 19:20:20] cmbecker69 at gmx dot de
The documentation has been updated accordingly, so the report can
be closed.
------------------------------------------------------------------------
[2014-02-09 09:58:40] steffen dot weber at gmail dot com
Description:
------------
In PHP 5.5 there is a new cURL option "CURLOPT_SAFE_UPLOAD" (see https://wiki.php.net/rfc/curl-file-upload) that
is missing from the documentation of curl_setopt (http://www.php.net/function.curl-setopt).
This option is relevant for security: Unless you enable this option anyone who controls the payload
in "curl_setopt($curl, CURLOPT_POSTFIELDS, $payload)" can send arbitrary local files.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=66677&edit=1
Thread (4 messages)