php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #28802 name of file upload cutted in php4.3.7
Submitted: 2004-06-16 11:52 UTC Modified: 2004-07-04 19:09 UTC
Votes:1
Avg. Score:1.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: mstaiger at informatik dot uni-siegen dot de Assigned:
Status: Not a bug Package: HTTP related
PHP Version: 4.3.7 OS: win 2k server
Private report: No CVE-ID: None
View Developer Edit
 [2004-06-16 11:52 UTC] mstaiger at informatik dot uni-siegen dot de 
Description:
------------
The typical file-upload HTML-command:

<input type="file" size=50 name="userfile">

creates an input field to pick a file from the local machine.

We used to "abuse" this field also to insert URLs instead of physical filenames which worked fine so far. When entered "http://www.somedomain.com" the php variable $_FILES['userfile']['name'] contained the entire URL : "http://www.somedomain.com"

Now, the new version seems to cut everything before the last slash and $_FILES['userfile']['name'] contains only "www.somedomain.com", without "http://" .

We could not find any documentation for this behaviour and doubt that this behaviour was desired?

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-06-18 20:02 UTC] imprestavel at gameguru dot com dot br 
You may try:
<input type="text" size=50 name="userURL">

Using input-file for URL was not desired because input-file is for uploading local files.


From the manual:
http://www.php.net/manual/en/features.file-upload.php

"$_FILES['userfile']['name']
    The *original name* of the *file on the client machine*."

original name != url/path

And if the client/browser decides to upload a "fake" empty file, because it doesn't exist locally, there is nothing php can do about it, but you could check that and do something
 [2004-07-04 19:09 UTC] iliaa@php.net 
The original path is just the filename, not the path + 
filename.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Wed Feb 05 12:01:32 2025 UTC