Re: [RFC] Fixing insecure cURL file uploading
| From: | Pierrick Charron | Date: | Mon, 07 Jan 2013 15:39:10 +0000 |
| Subject: | Re: [RFC] Fixing insecure cURL file uploading | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-64637@lists.php.net to get a copy of this message | ||
Looks good to me, just it could be great to add a new cURL option at
the same time to disable the '@' usage so that someone working with
the new ext/curl version can disable it and therefore send values
starting by @
Pierrick
On 7 January 2013 01:40, Stas Malyshev <smalyshev@sugarcrm.com> wrote:
> Hi!
>
> I've added the pull request for the CURLFile here:
> https://github.com/php/php-src/pull/255
>
> No procedural API yet, I'm not really sure if we need it, it's not that
> hard writing "new CurlFile()". But if needed I can add it there.
> Everybody please take a look and see if you notice any problems or
> missing stuff there. Tests are there and they pass for me :)
>
> --
> Stanislav Malyshev, Software Architect
> SugarCRM: http://www.sugarcrm.com/
> (408)454-6900 ext. 227