php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Doc Bug #66677 CURLOPT_SAFE_UPLOAD missing from curl_setopt docs
Submitted: 2014-02-09 09:58 UTC Modified: 2015-03-19 21:10 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:1 (100.0%)
Same OS:1 (100.0%)
From: steffen dot weber at gmail dot com Assigned: cmb (profile)
Status: Closed Package: cURL related
PHP Version: 5.5.9 OS: Linux
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: steffen dot weber at gmail dot com
New email:
PHP Version: OS:

 

 [2014-02-09 09:58 UTC] steffen dot weber at gmail dot com 
Description:
------------
In PHP 5.5 there is a new cURL option "CURLOPT_SAFE_UPLOAD" (see https://wiki.php.net/rfc/curl-file-upload) that is missing from the documentation of curl_setopt (http://www.php.net/function.curl-setopt).

This option is relevant for security: Unless you enable this option anyone who controls the payload in "curl_setopt($curl, CURLOPT_POSTFIELDS, $payload)" can send arbitrary local files.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2015-01-08 19:20 UTC] cmbecker69 at gmx dot de 
The documentation has been updated accordingly, so the report can
be closed.
 [2015-03-19 21:10 UTC] cmb@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: cmb
 [2022-06-11 18:23 UTC] kawewong at gmail dot com 
There is no document about this in English version.

Found in Spanish ( https://www.php.net/manual/es/function.curl-setopt.php ), Chinese ( https://www.php.net/manual/zh/function.curl-setopt.php ).
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Mon Jun 16 14:01:35 2025 UTC