I made a fix into dol_unescapefile file because file uplaod was broken
on linux and windows.
I had to remove the stripslashes. I don't see a reason to have it. May
be there is a diff between mac and linux when uploading a file ?
If you upload a file called
a'b
the $_FILES['userfile']['name']; exit;
a'b
Regis, can you confirm that submitting a file called
a'b
is still
a'b
if you make:
print $_FILES['userfile']['name']; exit;
just after the main.inc.php of a submitted document.php page (you must
make show source of html page to see real content, for example with
htdocs/societe/documents.php) ?
--
Eldy (Laurent Destailleur).
---------------------------------------------------------------
EMail: [email protected]
Web: http://www.destailleur.fr
Dolibarr (Project leader): http://www.dolibarr.org
To make a donation for Dolibarr project via Paypal: [email protected]
AWStats (Author) : http://awstats.sourceforge.net
To make a donation for AWStats project via Paypal: [email protected]
AWBot (Author) : http://awbot.sourceforge.net
CVSChangeLogBuilder (Author) : http://cvschangelogb.sourceforge.net
_______________________________________________
Dolibarr-dev mailing list
[email protected]
https://lists.nongnu.org/mailman/listinfo/dolibarr-dev
