Ilia Alshanetsky
7ee1fdb657
Prune uploaded file names to \ on all OSes, read comments for explanation.
2005-02-15 00:25:38 +00:00
Ilia Alshanetsky
d179e6aa40
Final version of filename upload handling.
2005-02-01 02:33:07 +00:00
Ilia Alshanetsky
71695f8159
Use multibyte specific code for handling files and generic basename based
...
code in all other instances.
2005-01-24 22:35:23 +00:00
Moriyoshi Koizumi
76d91f2a3d
- Revert irrelevant part.
2005-01-24 16:47:18 +00:00
Ilia Alshanetsky
844cc09cd1
Fixed bug #31398 (When magic_guotes_gpc are enabled filenames with '
...
get cutoff).
2005-01-20 17:44:58 +00:00
Stefan Esser
224201e635
Fixed: strip quotes from filename
2004-11-20 18:49:36 +00:00
Ilia Alshanetsky
f41c40f63e
Fixed bug #30750 (Meaningful error message when upload directory is not
...
accessible).
2004-11-11 00:38:04 +00:00
Stefan Esser
0f860d8f34
only allow valid arrays at this point
2004-09-13 16:00:23 +00:00
Stefan Esser
e7d698c7d8
New Rule: Never try to repair potential malicious user input
2004-09-12 10:45:14 +00:00
Sara Golemon
883e096ce6
Minor format specifier fixes
2004-08-11 04:27:01 +00:00
Ilia Alshanetsky
86efab2cc4
Fixed bug #29369 (Uploaded files with ' or " in their names get their names
...
truncated at those characters).
2004-07-25 19:19:26 +00:00
Andi Gutmans
e5cfb1d05c
- Better stability during premature shutdown of request startup
2004-07-10 07:46:17 +00:00
Stefan Esser
bed3f4ce0b
This is more correct.
2004-05-23 10:00:59 +00:00
Derick Rethans
cb1e4ab6c8
- Fixed TSRM problem in latest commit.
2004-05-21 08:16:13 +00:00
Derick Rethans
bc7ad69fbc
- Fixed bug #28456 (Problem with enclosed / in uploaded file names)
2004-05-21 08:11:43 +00:00
Derick Rethans
500f634db9
- Fixed defines
2004-05-11 15:30:54 +00:00
Derick Rethans
fe576c7acb
- Stopped file uploads from throwing E_WARNINGs and E_NOTICEs which can not be
...
hidden from within scripts (and a result value in the $_FILES global can be
used to see the real failure anyway).
2004-03-25 21:27:23 +00:00
Derick Rethans
9ff10d086a
- Revert bogus commit
2004-03-24 14:28:41 +00:00
Derick Rethans
2face60bef
- Fixed NEWS
...
#- Can we *please* keep this in order?
2004-03-24 13:31:20 +00:00
Stefan Esser
debf069a58
better write into the correct buffer
2004-02-12 18:27:33 +00:00
Andi Gutmans
dbeb4158d2
- A belated happy holidays and PHP 5
2004-01-08 08:18:22 +00:00
Derick Rethans
8eb22d7b8d
- Add comment, I put this ina week ago and it already confused me :)
2003-12-07 14:47:35 +00:00
Derick Rethans
750b0338bf
- Fix sapi_input_filter patch. Returning 1 from the filter handler should
...
make PHP register the variable, returning 0 shouldn't. The new length of
the variables being filtered is now returned in the new_val_len argument
of the function.
2003-11-29 15:24:35 +00:00
Derick Rethans
370dfd39a9
- Prevent registration of the variable when a zero-length is returned
...
from the sapi_input_filter.
2003-11-26 09:53:22 +00:00
Stefan Esser
befbd6d793
Fix odd increments to repair the boundary checks.
2003-11-12 22:34:58 +00:00
Rui Hirokawa
744212ab45
added buffer reallocation for filename.
2003-11-05 23:27:41 +00:00
Stefan Esser
b763dd42c3
Fixed possible crashbug.
2003-11-03 11:46:33 +00:00
Stefan Esser
f670f9c683
It is usually a good idea to write only into allocated bufferspace.
2003-11-03 09:16:24 +00:00
Rui Hirokawa
0ce637835a
name/value in multipart/form-date will be converted into internal encoding when mbstring.encoding_translation is On.
2003-10-22 14:14:05 +00:00
Moriyoshi Koizumi
fd9d9dea1c
Fix build
2003-07-03 15:26:12 +00:00
foobar
50d3650a92
Cut the long line a bit for readability..
2003-07-03 02:59:04 +00:00
Ilia Alshanetsky
a96aa89ae3
Compiler warning fix.
2003-07-03 00:55:20 +00:00
Rui Hirokawa
2b44c63d50
Fixed corruption of multibyte character including 0x5c as second
...
byte in multipart/form-data.
2003-06-28 23:37:18 +00:00
James Cox
f68c7ff249
updating license information in the headers.
2003-06-10 20:04:29 +00:00
Sara Golemon
dccf33b4e8
MFB(r-1.122.2.10)
...
Bug#23765 File upload handler should not care about case sensitivity of header values.
2003-05-23 21:40:45 +00:00
Ilia Alshanetsky
4e6997ddf9
Fixed bug #22550 (overflow protection for upload_max_filesize ini setting).
2003-03-05 17:00:09 +00:00
Rasmus Lerdorf
d08a0e99c8
An input filter might not simply strip stuff, it might also turn things
...
into entities or use some other mechanism which causes the filtered data
to be longer than the original data. Ergo, pass in the address of the
buffer instead so the filter is free to reallocate it.
2003-02-20 22:21:49 +00:00
Rasmus Lerdorf
7429c2dc3f
Input Filter support. See README.input_filter for details.
...
@- Input Filter support added. See README.input_filter. (Rasmus)
2003-02-19 19:41:09 +00:00
foobar
8e3f23e3c0
ws fixes + missing $Id$ tags, headers added
2003-02-19 08:40:19 +00:00
Stefan Esser
58d65abbcb
Adding support for anonymous fileuploads ( #21450 )
2003-01-06 23:51:28 +00:00
Sebastian Bergmann
2c5d4b8c23
Bump year.
2002-12-31 15:59:15 +00:00
Ilia Alshanetsky
1f50681813
Fixed bug #21149 (fixed handling of unterminated '[').
2002-12-29 21:02:17 +00:00
Stefan Esser
75d8056e11
cleanup
2002-12-14 10:45:25 +00:00
Ilia Alshanetsky
3c9a6a8890
Removed one more unneeded check.
2002-12-10 15:58:31 +00:00
Ilia Alshanetsky
ecc9c539d2
Removed a pointless check. Thanks Stefan.
2002-12-10 15:36:26 +00:00
Ilia Alshanetsky
8425dbd0bc
Fixed bugs #20725 & #20860 . Post form variables get lost if the uploaded
...
files cannot be written to disk.
2002-12-07 00:48:13 +00:00
Stefan Esser
9dae1475ef
little fix
2002-11-22 19:34:17 +00:00
Stefan Esser
658fd1ba8d
Fixing possible remote overflow due to mbstring translation.
2002-11-14 16:30:07 +00:00
Moriyoshi Koizumi
e8be0db546
Fixed build when mbstring is not used - my previous patch is insufficient.
2002-10-24 02:59:01 +00:00
Moriyoshi Koizumi
73ca375f37
MFH; we would see a nasty problem again if it was not fixed...
2002-10-24 02:56:28 +00:00
