php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Doc Bug #4207 $userfile_name may contains a path
Submitted: 2000-04-20 15:33 UTC Modified: 2000-08-17 10:00 UTC
From: dividuum at gmx dot net Assigned:
Status: Closed Package: Documentation problem
PHP Version: 3.0.16 OS: Linux (tested)
Private report: No CVE-ID: None
 [2000-04-20 15:33 UTC] dividuum at gmx dot net
It is possible that the variable $userfile_name contains a path. This might be a problem, since programmers may rely on the documentation which tells them:

$userfile_name - The original name of the file on the sender's system. 

I tested 3.0.6, 3.0.12, 3.0.16 (source only), and php4RC1. 

For an example you might check out 
http://www.dividuum.de/download/phpupload.html

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-08-17 10:00 UTC] hholzgra@php.net
calrified in cvs
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved.
Last updated: Mon Jun 15 01:00:02 2026 UTC