Annotation of embedaddon/php/tests/basic/bug55500.phpt, revision 1.1

1.1     ! misho       1: --TEST--
        !             2: Bug #55500 (Corrupted $_FILES indices lead to security concern)
        !             3: --INI--
        !             4: file_uploads=1
        !             5: error_reporting=E_ALL&~E_NOTICE
        !             6: upload_max_filesize=1024
        !             7: max_file_uploads=10
        !             8: --POST_RAW--
        !             9: Content-Type: multipart/form-data; boundary=---------------------------20896060251896012921717172737
        !            10: -----------------------------20896060251896012921717172737
        !            11: Content-Disposition: form-data; name="file[]"; filename="file1.txt"
        !            12: Content-Type: text/plain-file1
        !            13: 
        !            14: 1
        !            15: -----------------------------20896060251896012921717172737
        !            16: Content-Disposition: form-data; name="file[[type]"; filename="file2.txt"
        !            17: Content-Type: text/plain-file2
        !            18: 
        !            19: 2
        !            20: -----------------------------20896060251896012921717172737
        !            21: Content-Disposition: form-data; name="file[[name]"; filename="file3.txt"
        !            22: Content-Type: text/plain-file3
        !            23: 
        !            24: 3
        !            25: -----------------------------20896060251896012921717172737
        !            26: Content-Disposition: form-data; name="file[name]["; filename="file4.txt"
        !            27: Content-Type: text/plain-file3
        !            28: 
        !            29: 4
        !            30: -----------------------------20896060251896012921717172737--
        !            31: --FILE--
        !            32: <?php
        !            33: var_dump($_FILES);
        !            34: var_dump($_POST);
        !            35: ?>
        !            36: --EXPECTF--
        !            37: array(1) {
        !            38:   [%u|b%"file"]=>
        !            39:   array(5) {
        !            40:     [%u|b%"name"]=>
        !            41:     array(1) {
        !            42:       [0]=>
        !            43:       %unicode|string%(9) "file1.txt"
        !            44:     }
        !            45:     [%u|b%"type"]=>
        !            46:     array(1) {
        !            47:       [0]=>
        !            48:       %unicode|string%(16) "text/plain-file1"
        !            49:     }
        !            50:     [%u|b%"tmp_name"]=>
        !            51:     array(1) {
        !            52:       [0]=>
        !            53:       %unicode|string%(%d) "%s"
        !            54:     }
        !            55:     [%u|b%"error"]=>
        !            56:     array(1) {
        !            57:       [0]=>
        !            58:       int(0)
        !            59:     }
        !            60:     [%u|b%"size"]=>
        !            61:     array(1) {
        !            62:       [0]=>
        !            63:       int(1)
        !            64:     }
        !            65:   }
        !            66: }
        !            67: array(0) {
        !            68: }

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>