|
Revision tags: NEWS, php-5.2.8, BEFORE_HEAD_NS_CHANGES_MERGE, php-5.3.0alpha3, php-5.3.0alpha2, php-5.2.7, php-5.2.7RC5, php-5.2.7RC4, BEFORE_HEAD_NS_CHANGE, BEFORE_NS_RULES_CHANGE, php-5.2.7RC3, php-5.2.7RC2 |
|
| #
f5dd8c00 |
| 20-Oct-2008 |
Arnaud Le Blanc |
WS |
| #
0f31ed2f |
| 20-Oct-2008 |
Arnaud Le Blanc |
Better fix for #46313 |
| #
c98e2879 |
| 20-Oct-2008 |
Arnaud Le Blanc |
Fixed #46313 (Magic quotes broke $_FILES)
# magic_quotes_gpc was disabled during registration of $_FILES["x"]["tmp_name"]
# and $GLOBALS["x"] (which is tmp_name with register_globals enabled)
Fixed #46313 (Magic quotes broke $_FILES)
# magic_quotes_gpc was disabled during registration of $_FILES["x"]["tmp_name"]
# and $GLOBALS["x"] (which is tmp_name with register_globals enabled). This
# caused "x" to not be escaped so there was 2 different keys for the same file
# in $_FILES, one with tmp_name and the other without.
# All other variables (name, size, etc) are registered with magic_quotes_gpc
# untouched, both in $_FILES and $GLOBALS and I did not found a reason for
# disabling it for tmp_name.
show more ...
|
|
Revision tags: php-5.2.7RC1 |
|
| #
8a77e555 |
| 23-Sep-2008 |
Nuno Lopes |
clean some dead code (with static analysis help) |
| #
ef38ff62 |
| 07-Sep-2008 |
Arnaud Le Blanc |
MFH: More accurate max_file_size / upload_max_filesize (fixes #45124) |
| #
898ff10d |
| 06-Sep-2008 |
Arnaud Le Blanc |
MFH: Fixed #43540 (rfc1867 handler newlength problem) |
|
Revision tags: php-4.4.9, php-5.3.0alpha1, php-4.4.9RC1, BEFORE_NEW_PARAMETER_PARSE, RELEASE_1_2_5, RELEASE_2_0_0b1, php-5.2.6, RELEASE_1_0_2, php-5.2.6RC5, php-5.2.6RC4, php-5.2.6RC3, RELEASE_2_0_0a2, RELEASE_2_0_0a1 |
|
| #
8f6b35cc |
| 14-Mar-2008 |
Antony Dovgal |
MFH: check if return value of write() is -1 and abort upload in this case setting the correct error status |
|
Revision tags: php-5.2.6RC2, php-5.2.6RC1, RELEASE_1_3_1, php-4.4.8 |
|
| #
d1dded87 |
| 31-Dec-2007 |
Sebastian Bergmann |
MFH: Bump copyright year, 2 of 2. |
|
Revision tags: php-4.4.8RC1, RELEASE_1_2_3, php-5.2.5, php-5.2.5RC2, php-5.2.5RC1, BEFORE_IMPORT_OF_MYSQLND_IN_5_3, RELEASE_1_2_2, RELEASE_1_2_4, RELEASE_1_2_1, php-5.2.4, RELEASE_1_5, php-5.2.4RC3, php-5.2.4RC2, php-5.2.4RC1, BEFORE_REAL_IMPORT_OF_MYSQLND, BEFORE_IMPORT_OF_MYSQLND |
|
| #
20aa8549 |
| 17-Jul-2007 |
Ilia Alshanetsky |
Allow file uploads to bypass open_basedir checks (fixes regression) |
|
Revision tags: php-5.2.3, RELEASE_1_4, php-5.2.3RC1, RELEASE_1_2_0, php-4.4.7, php-5.2.2, php-5.2.2RC2, RELEASE_1_1_0, php-4.4.7RC1, php-5.2.2RC1, RELEASE_1_0_1, php-4.4.6 |
|
| #
24fa61e2 |
| 24-Feb-2007 |
Marcus Boerger |
- Drop superflous efree |
| #
50ea2676 |
| 24-Feb-2007 |
Marcus Boerger |
- Avoid sprintf, even when checked copy'n'paste or changes lead to errors |
|
Revision tags: php-4.4.6RC1, php-4.4.5, php-5.2.1, RELEASE_1_0_0RC1, php-4.4.5RC2, php-5.2.1RC4, php-5.2.1RC3, php-4.4.5RC1, php-5.2.1RC2 |
|
| #
4223aa4d |
| 01-Jan-2007 |
Sebastian Bergmann |
MFH: Bump year. |
|
Revision tags: php-5.2.1RC1, php-5.2.0, php-5.2.0RC6, php-5.2.0RC5 |
|
| #
abfc08dc |
| 29-Sep-2006 |
Stefan Esser |
If one name is disallowed don't drop all files |
| #
1e8fc230 |
| 19-Sep-2006 |
Stefan Esser |
Delete empty temporary files if file upload hook forbids the upload |
|
Revision tags: php-5.2.0RC4 |
|
| #
935b0c88 |
| 09-Sep-2006 |
Rasmus Lerdorf |
Minor tweak to the file upload hooks. The MULTIPART_EVENT_FORMDATA event
was only triggering when an input filter was applied. This simple change
makes the event also trigger when no filter
Minor tweak to the file upload hooks. The MULTIPART_EVENT_FORMDATA event
was only triggering when an input filter was applied. This simple change
makes the event also trigger when no filter is applied. The newlength
pointer is set to NULL to let a downstream module differentiate between
the two cases.
show more ...
|
|
Revision tags: php-5.2.0RC3, php-5.1.6, php-5.2.0RC2, php-5.1.5, php-4.4.4, php-4.4.4RC1, php-5.1.5RC1, php-4.4.3 |
|
| #
cfda15ff |
| 27-Jul-2006 |
Ilia Alshanetsky |
Binary safe multipart request handling |
|
Revision tags: php-5.2.0RC1 |
|
| #
cfac29e2 |
| 22-Jul-2006 |
Stefan Esser |
Added RFC1867 fileupload processing hook. |
|
Revision tags: php-4.4.3RC2, BEFORE_NEW_OUTPUT_API, php-4.4.3RC1, php-5.1.4, RELEASE_1_0_3, php-5.1.3, php-5.1.2, RELEASE_1_3, php-5.1.3RC3, php-5.1.3RC2, php-5.1.3RC1, RELEASE_1_2, RELEASE_0_9_4, RELEASE_1_0_4, php-4.4.2, php-5.1.2RC2, php-4.4.2RC2 |
|
| #
5bd93221 |
| 01-Jan-2006 |
foobar |
bump year and license version |
|
Revision tags: php-5.1.2RC1, RELEASE_1_1_1, RELEASE_1_1, RELEASE_1_0, RELEASE_2_0_2, php-5.1.1, php-5.1.0, php-4.4.2RC1, RELEASE_0_9_3, php-5.1.0RC6, php-5.1.0RC5, RELEASE_2_0_1, RELEASE_1_0RC2, php-4.4.1, php-5.1.0RC4, RELEASE_0_9_2, RELEASE_0_9_1, php-5.1.0RC3, php-5.1.0RC2, php-4.4.1RC1, RELEASE_0_9_0, RELEASE_1_0RC1, PRE_NEW_OCI8_EXTENSION, php-5.1.0RC2_PRE, php-5.0.5, php-5.0.5RC2, php-5.0.5RC1, php-5.1.0RC1, BEFORE_UNICODE_MERGE, RELEASE_2_0_0 |
|
| #
23e671a5 |
| 03-Aug-2005 |
foobar |
- Bumber up year |
|
Revision tags: RELEASE_0_9, php-5.1.0b3 |
|
| #
85e23788 |
| 13-Jul-2005 |
Ilia Alshanetsky |
Fixed bug #33673 (Added detection for partially uploaded files). |
|
Revision tags: php-4.4.0, php-4.4.0RC2, php-5.1.0b2, php-4.4.0RC1, php-5.1.0b1, php-5.0.1b1, RELEASE_0_3 |
|
| #
4558cdad |
| 04-Apr-2005 |
Uwe Schindler |
Bug #32491 (File upload error - unable to create a temporary file) - Changing file upload from stdio to posix |
|
Revision tags: php-5.0.4, php-4.3.11, php-5.0.4RC2, php-4.3.11RC2, php-5.0.4RC1, php-4.3.11RC1, RELEASE_0_2_4 |
|
| #
7ee1fdb6 |
| 15-Feb-2005 |
Ilia Alshanetsky |
Prune uploaded file names to \ on all OSes, read comments for explanation. |
|
Revision tags: RELEASE_0_2_3, RELEASE_0_2_2, RELEASE_0_2_1, RELEASE_0_2 |
|
| #
d179e6aa |
| 01-Feb-2005 |
Ilia Alshanetsky |
Final version of filename upload handling. |
| #
71695f81 |
| 24-Jan-2005 |
Ilia Alshanetsky |
Use multibyte specific code for handling files and generic basename based
code in all other instances. |
| #
76d91f2a |
| 24-Jan-2005 |
Moriyoshi Koizumi |
- Revert irrelevant part. |
