Re: is_uploaded_file() security

From:	Raditha Dissanayake	Date:	Thu, 23 Oct 2003 14:13:31 +0000
Subject:	Re: is_uploaded_file() security
References:	1 2 3 4 5 6	Groups:	php.general
Request:	Send a blank email to php-general+get-167270@lists.php.net to get a copy of this message

Hi, Multipart/form-data sends the entire file, if you don't use that enctype yes, just the file name is sent. best regards Alexander Mueller wrote:

Raditha Dissanayake wrote:
This does not work with multipart/form-data you need www-urlencoded (or just don't set an enctype attribute in your form)
What would happen in this case? The given filename would be passed to the script?! Alexander

-- Raditha Dissanayake. ------------------------------------------------------------------------ http://www.radinks.com/sftp/ | http://www.raditha/megaupload/ Lean and mean Secure FTP applet with | Mega Upload - PHP file uploader Graphical User Inteface. Just 150 KB | with progress bar.