[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Dolibarr-dev] Pb with file upload

From: Régis Houssin
Subject: Re: [Dolibarr-dev] Pb with file upload
Date: Fri, 01 Jun 2012 11:13:07 +0200
User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:12.0) Gecko/20120428 Thunderbird/12.0.1

i use this file name : Capture d'ecran.docx
my function :

trim(basename(stripslashes($filename)), ".\x00..\x20");

common function found around the internet and can clean the file name in

print $_FILES : Capture d\'ecran.docx

with my function :
files is record with name : Capture d'ecran.docx
source code in link: Capture+d%27ecran.docx

without my function:
files is record with name : Capture d\'ecran.docx
source code in link : Capture+d%5C%27ecran.docx
the file does not delete when I click on the trash

Le 01/06/12 10:42, Laurent Destailleur (eldy) a écrit :
> I made a fix into dol_unescapefile file because file uplaod was broken
> on linux and windows.
> I had to remove the stripslashes. I don't see a reason to have it. May
> be there is a diff between mac and linux when uploading a file ?
> If you upload a file called
> a'b
> the $_FILES['userfile']['name']; exit;
> a'b
> Regis, can you confirm that submitting a file called
> a'b
> is still
> a'b
> if you make:
> print $_FILES['userfile']['name']; exit;
> just after the of a submitted document.php page (you must
> make show source of html page to see real content, for example with
> htdocs/societe/documents.php) ?

Régis Houssin
Cidex 1130
34, route de Gigny
71240 MARNAY
VoIP: +33 1 83 62 40 03
GSM: +33 6 33 02 07 97
Email: address@hidden

Dolibarr developer: address@hidden
Web Portal:
SaaS offers:
Development platform:

reply via email to

[Prev in Thread] Current Thread [Next in Thread]