#34496 [Com]: single quote copying files
ID: 34496
Comment by: jeremiesaen at gmail dot com
Reported By: before_after_death at yahoo dot com
Status: No Feedback
Bug Type: *Directory/Filesystem functions
Operating System: WINDOWS XP
PHP Version: 5.0.4
New Comment:
I've the same problem with PHP Version 4.3.11 i can't apply a regular
expression because $_FILE['name'] has already the name cutted
Previous Comments:
[2006-03-16 10:29:23] walther dot princee at centric dot nl
I'm experiencing a similar problem with file upload on php 5.0.4, 5.1.2
and 5.1.3-dev (feb 13) on win2k and windows2003. When sending a file
with name:
file with ' quote.txt
then in the receiving script print_r($_FILES) gives:
Array ( [qfile] => Array ( [name] => quote.txt [type] => text/plain
[tmp_name] => C:\WINNT\TEMP\php7C.tmp [error] => 0 [size] => 1968 ) ).
So I have only the part of the filename after the '
[2005-09-22 01:00:01] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
[2005-09-14 08:14:22] [EMAIL PROTECTED]
Please try using this CVS snapshot:
http://snaps.php.net/php5-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php5-win32-latest.zip
[2005-09-14 04:54:17] before_after_death at yahoo dot com
Description:
There's bug that I found in PHP5.0.4 (I'm sorry if the problem has been
fixed)
This is the problem:
for example: the $uploadfile=bring'iton.jpg
and the result: iton.jpg
it doesn't happen at PHP4 version, so I remigrate to PHP4 again.
Reproduce code:
---
$file_name upload succeed";
$query_insert="INSERT INTO dirfiles (filename, dirpath) VALUES
('$file_name', '$cwdvar1')";
$query_res=mysql_query("$query_insert");
if($query_res){
echo "database updated";
}
}else{
echo "$file_name database doesn't updated";
}
?>
Expected result:
i expect the result is bringiton.jpg (because there's an str_replace
function)
and I try to remigrate to PHP4, the result is bringiton.jpg
Actual result:
--
The result is iton.jpg (at PHP 5.0.4)
--
Edit this bug report at http://bugs.php.net/?id=34496&edit=1
#34496 [Com]: single quote copying files
ID: 34496
Comment by: walther dot princee at centric dot nl
Reported By: before_after_death at yahoo dot com
Status: No Feedback
Bug Type: *Directory/Filesystem functions
Operating System: WINDOWS XP
PHP Version: 5.0.4
New Comment:
I'm experiencing a similar problem with file upload on php 5.0.4, 5.1.2
and 5.1.3-dev (feb 13) on win2k and windows2003. When sending a file
with name:
file with ' quote.txt
then in the receiving script print_r($_FILES) gives:
Array ( [qfile] => Array ( [name] => quote.txt [type] => text/plain
[tmp_name] => C:\WINNT\TEMP\php7C.tmp [error] => 0 [size] => 1968 ) ).
So I have only the part of the filename after the '
Previous Comments:
[2005-09-22 01:00:01] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
[2005-09-14 08:14:22] [EMAIL PROTECTED]
Please try using this CVS snapshot:
http://snaps.php.net/php5-latest.tar.gz
For Windows:
http://snaps.php.net/win32/php5-win32-latest.zip
[2005-09-14 04:54:17] before_after_death at yahoo dot com
Description:
There's bug that I found in PHP5.0.4 (I'm sorry if the problem has been
fixed)
This is the problem:
for example: the $uploadfile=bring'iton.jpg
and the result: iton.jpg
it doesn't happen at PHP4 version, so I remigrate to PHP4 again.
Reproduce code:
---
$file_name upload succeed";
$query_insert="INSERT INTO dirfiles (filename, dirpath) VALUES
('$file_name', '$cwdvar1')";
$query_res=mysql_query("$query_insert");
if($query_res){
echo "database updated";
}
}else{
echo "$file_name database doesn't updated";
}
?>
Expected result:
i expect the result is bringiton.jpg (because there's an str_replace
function)
and I try to remigrate to PHP4, the result is bringiton.jpg
Actual result:
--
The result is iton.jpg (at PHP 5.0.4)
--
Edit this bug report at http://bugs.php.net/?id=34496&edit=1
