Annotation of embedaddon/php/tests/basic/bug55500.phpt, revision 1.1
1.1 ! misho 1: --TEST--
! 2: Bug #55500 (Corrupted $_FILES indices lead to security concern)
! 3: --INI--
! 4: file_uploads=1
! 5: error_reporting=E_ALL&~E_NOTICE
! 6: upload_max_filesize=1024
! 7: max_file_uploads=10
! 8: --POST_RAW--
! 9: Content-Type: multipart/form-data; boundary=---------------------------20896060251896012921717172737
! 10: -----------------------------20896060251896012921717172737
! 11: Content-Disposition: form-data; name="file[]"; filename="file1.txt"
! 12: Content-Type: text/plain-file1
! 13:
! 14: 1
! 15: -----------------------------20896060251896012921717172737
! 16: Content-Disposition: form-data; name="file[[type]"; filename="file2.txt"
! 17: Content-Type: text/plain-file2
! 18:
! 19: 2
! 20: -----------------------------20896060251896012921717172737
! 21: Content-Disposition: form-data; name="file[[name]"; filename="file3.txt"
! 22: Content-Type: text/plain-file3
! 23:
! 24: 3
! 25: -----------------------------20896060251896012921717172737
! 26: Content-Disposition: form-data; name="file[name]["; filename="file4.txt"
! 27: Content-Type: text/plain-file3
! 28:
! 29: 4
! 30: -----------------------------20896060251896012921717172737--
! 31: --FILE--
! 32: <?php
! 33: var_dump($_FILES);
! 34: var_dump($_POST);
! 35: ?>
! 36: --EXPECTF--
! 37: array(1) {
! 38: [%u|b%"file"]=>
! 39: array(5) {
! 40: [%u|b%"name"]=>
! 41: array(1) {
! 42: [0]=>
! 43: %unicode|string%(9) "file1.txt"
! 44: }
! 45: [%u|b%"type"]=>
! 46: array(1) {
! 47: [0]=>
! 48: %unicode|string%(16) "text/plain-file1"
! 49: }
! 50: [%u|b%"tmp_name"]=>
! 51: array(1) {
! 52: [0]=>
! 53: %unicode|string%(%d) "%s"
! 54: }
! 55: [%u|b%"error"]=>
! 56: array(1) {
! 57: [0]=>
! 58: int(0)
! 59: }
! 60: [%u|b%"size"]=>
! 61: array(1) {
! 62: [0]=>
! 63: int(1)
! 64: }
! 65: }
! 66: }
! 67: array(0) {
! 68: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>