ID: 40813 Updated by: [EMAIL PROTECTED] Reported By: gianluca dot gimigliano at interno dot it -Status: Assigned +Status: Bogus Bug Type: *Web Server problem Operating System: Windows XP PHP Version: 5.2.1 Assigned To: iliaa New Comment:
Thank you for taking the time to write to us, but this is not a bug. Please double-check the documentation available at http://www.php.net/manual/ and the instructions on how to report a bug at http://bugs.php.net/how-to-report.php On Win32 \ is a directory separator, so when \ is added to escape ' and alike characters due to magic_quotes_gpc you end up in a situation where part of the filename is stripped. Previous Comments: ------------------------------------------------------------------------ [2007-03-17 00:48:26] [EMAIL PROTECTED] I the meanwhile you can set magic_quotes_gpc=off in your php.ini which will avoid this problem if your code does not depend on the magic_quotes (which it shouldn't anyway), ------------------------------------------------------------------------ [2007-03-17 00:42:11] [EMAIL PROTECTED] Ilia, please take a look at this issue. It's your patch causes this behaviour: http://cvs.php.net/viewvc.cgi/php-src/main/rfc1867.c?view=diff&r1=1.168&r2=1.169 The last #ifdef PHP_WIN32 doesn't look right, did it get there by mistake? ------------------------------------------------------------------------ [2007-03-15 14:19:25] gianluca dot gimigliano at interno dot it With this apache version: Apache Version Apache/2.2.4 (Win32) mod_ssl/2.2.4 OpenSSL/0.9.8d PHP/5.2.2-dev The prolem is the same ------------------------------------------------------------------------ [2007-03-15 13:02:30] [EMAIL PROTECTED] Please try using this CVS snapshot: http://snaps.php.net/php5.2-latest.tar.gz For Windows: http://snaps.php.net/win32/php5.2-win32-latest.zip ------------------------------------------------------------------------ [2007-03-15 09:47:54] gianluca dot gimigliano at interno dot it Description: ------------ When you try to upload a file with the character:' in the name, the uploaded file name is read from the ' position. Reproduce code: --------------- <html><head></head> <body> <? if ($_FILES['uploaded']) echo $_FILES['uploaded']['name']; ?> <form method="post" enctype="multipart/form-data"> <input name="uploaded" type="file"> <input name="send" type="submit" value="send"> </form> </body> </html> Expected result: ---------------- If the uploaded file name is: special'ized.doc The correct output is: special'ized.doc Actual result: -------------- If the uploaded file name is: special'ized.doc The real output is: ized.doc ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=40813&edit=1
