php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Doc Bug #4207 $userfile_name may contains a path
Submitted: 2000-04-20 15:33 UTC Modified: 2000-08-17 10:00 UTC
From: dividuum at gmx dot net Assigned:
Status: Closed Package: Documentation problem
PHP Version: 3.0.16 OS: Linux (tested)
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: dividuum at gmx dot net
New email:
PHP Version: OS:

 

 [2000-04-20 15:33 UTC] dividuum at gmx dot net
It is possible that the variable $userfile_name contains a path. This might be a problem, since programmers may rely on the documentation which tells them:

$userfile_name - The original name of the file on the sender's system. 

I tested 3.0.6, 3.0.12, 3.0.16 (source only), and php4RC1. 

For an example you might check out 
http://www.dividuum.de/download/phpupload.html

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-08-17 10:00 UTC] hholzgra@php.net
calrified in cvs
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved.
Last updated: Mon Jun 15 03:00:02 2026 UTC