Re: [RFC] Fixing insecure cURL file uploading
| From: | Pierrick Charron | Date: | Thu, 17 Jan 2013 18:42:57 +0000 |
| Subject: | Re: [RFC] Fixing insecure cURL file uploading | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-65013@lists.php.net to get a copy of this message | ||
Hi Stas,
What's the status of this fix ?
Thanks
Pierrick
On 8 January 2013 04:23, Stas Malyshev <smalyshev@sugarcrm.com> wrote:
> Hi!
>
>> Looks good to me, just it could be great to add a new cURL option at
>> the same time to disable the '@' usage so that someone working with
>> the new ext/curl version can disable it and therefore send values
>> starting by @
>
> That is a good suggestion, I'll add CURL_SAFE_POSTFIELDS which would
> disable the @ option.
>
> --
> Stanislav Malyshev, Software Architect
> SugarCRM: http://www.sugarcrm.com/
> (408)454-6900 ext. 227