From:             alexei dot svitkine at gmail dot com
Operating system: Linux
PHP version:      5.2.10
PHP Bug Type:     cURL related
Bug description:  cURL does not upload files with specified filename

Description:
------------
Currently, using cURL from PHP, it is not possible to specify a custom 
filename on the file sent with the POST. PHP always tells cURL to send 
the full path from the filesystem to the server.

However, it is possible to do this from the command-line using:

curl -F 'file=@/tmp/myfile;filename=foo.zip' http://example.com 

This bug is similar to:

http://bugs.php.net/bug.php?id=46696

In that bug (which is now fixed), PHP ignored the 'type' parameter 
which was passed in a similar way as 'filename' above, but was fixed 
to detect it.


Reproduce code:
---------------
# File test1.php

$data = array('file' => '@/tmp/myfile;filename=foobar');

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'http://localhost/upload.php');
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
curl_exec($ch);

echo curl_error($ch);

# File test2.php

$data = array('file' =>
'@/tmp/myfile;filename=foobar;type=application/zip');

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'http://localhost/upload.php');
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
curl_exec($ch);

echo curl_error($ch);

# File upload.php

print_r($_FILES);


Expected result:
----------------
# Result of test1.php

Array
(
    [item_file] => Array
        (
            [name] => foobar
            [type] => application/octet-stream
            [tmp_name] => /var/tmp/phpCEVFto
            [error] => 0
            [size] => 36257
        )

)

# Result of test1.php

Array
(
    [item_file] => Array
        (
            [name] => foobar
            [type] => application/zip
            [tmp_name] => /var/tmp/phpCEVFto
            [error] => 0
            [size] => 36257
        )

)

Actual result:
--------------
The ";filename=foobar" part is either treated as part of the file path 
(in test1.php), so the file is not found, and curl_exec() fails, or it 
is treated as part of the 'type' (in test2.php), so incorrect 
information is sent.

In either case, PHP currently does not look for the 'filename' parameter 
as it does for the 'type' parameter, and handles it incorrectly. The fix 
should be made to the "case CURLOPT_POSTFIELDS:" code in 
ext/curl/interface.c, similar to how 'type' is already handled there.

This report applies to PHP 5.2.10 and PHP 5.3.0.

-- 
Edit bug report at http://bugs.php.net/?id=48962&edit=1
-- 
Try a CVS snapshot (PHP 5.2):        
http://bugs.php.net/fix.php?id=48962&r=trysnapshot52
Try a CVS snapshot (PHP 5.3):        
http://bugs.php.net/fix.php?id=48962&r=trysnapshot53
Try a CVS snapshot (PHP 6.0):        
http://bugs.php.net/fix.php?id=48962&r=trysnapshot60
Fixed in CVS:                        
http://bugs.php.net/fix.php?id=48962&r=fixedcvs
Fixed in CVS and need be documented: 
http://bugs.php.net/fix.php?id=48962&r=needdocs
Fixed in release:                    
http://bugs.php.net/fix.php?id=48962&r=alreadyfixed
Need backtrace:                      
http://bugs.php.net/fix.php?id=48962&r=needtrace
Need Reproduce Script:               
http://bugs.php.net/fix.php?id=48962&r=needscript
Try newer version:                   
http://bugs.php.net/fix.php?id=48962&r=oldversion
Not developer issue:                 
http://bugs.php.net/fix.php?id=48962&r=support
Expected behavior:                   
http://bugs.php.net/fix.php?id=48962&r=notwrong
Not enough info:                     
http://bugs.php.net/fix.php?id=48962&r=notenoughinfo
Submitted twice:                     
http://bugs.php.net/fix.php?id=48962&r=submittedtwice
register_globals:                    
http://bugs.php.net/fix.php?id=48962&r=globals
PHP 4 support discontinued:          http://bugs.php.net/fix.php?id=48962&r=php4
Daylight Savings:                    http://bugs.php.net/fix.php?id=48962&r=dst
IIS Stability:                       
http://bugs.php.net/fix.php?id=48962&r=isapi
Install GNU Sed:                     
http://bugs.php.net/fix.php?id=48962&r=gnused
Floating point limitations:          
http://bugs.php.net/fix.php?id=48962&r=float
No Zend Extensions:                  
http://bugs.php.net/fix.php?id=48962&r=nozend
MySQL Configuration Error:           
http://bugs.php.net/fix.php?id=48962&r=mysqlcfg

Reply via email to