File:  [ELWIX - Embedded LightWeight unIX -] / embedaddon / php / tests / basic / bug55500.phpt
Revision 1.1.1.1 (vendor branch): download - view: text, annotated - select for diffs - revision graph
Tue May 29 12:34:34 2012 UTC (12 years, 4 months ago) by misho
Branches: php, MAIN
CVS tags: v5_4_3elwix, v5_4_29p0, v5_4_29, v5_4_20p0, v5_4_20, v5_4_17p0, v5_4_17, HEAD
php 5.4.3+patches

    1: --TEST--
    2: Bug #55500 (Corrupted $_FILES indices lead to security concern)
    3: --INI--
    4: file_uploads=1
    5: error_reporting=E_ALL&~E_NOTICE
    6: upload_max_filesize=1024
    7: max_file_uploads=10
    8: --POST_RAW--
    9: Content-Type: multipart/form-data; boundary=---------------------------20896060251896012921717172737
   10: -----------------------------20896060251896012921717172737
   11: Content-Disposition: form-data; name="file[]"; filename="file1.txt"
   12: Content-Type: text/plain-file1
   13: 
   14: 1
   15: -----------------------------20896060251896012921717172737
   16: Content-Disposition: form-data; name="file[[type]"; filename="file2.txt"
   17: Content-Type: text/plain-file2
   18: 
   19: 2
   20: -----------------------------20896060251896012921717172737
   21: Content-Disposition: form-data; name="file[[name]"; filename="file3.txt"
   22: Content-Type: text/plain-file3
   23: 
   24: 3
   25: -----------------------------20896060251896012921717172737
   26: Content-Disposition: form-data; name="file[name]["; filename="file4.txt"
   27: Content-Type: text/plain-file3
   28: 
   29: 4
   30: -----------------------------20896060251896012921717172737--
   31: --FILE--
   32: <?php
   33: var_dump($_FILES);
   34: var_dump($_POST);
   35: ?>
   36: --EXPECTF--
   37: array(1) {
   38:   [%u|b%"file"]=>
   39:   array(5) {
   40:     [%u|b%"name"]=>
   41:     array(1) {
   42:       [0]=>
   43:       %unicode|string%(9) "file1.txt"
   44:     }
   45:     [%u|b%"type"]=>
   46:     array(1) {
   47:       [0]=>
   48:       %unicode|string%(16) "text/plain-file1"
   49:     }
   50:     [%u|b%"tmp_name"]=>
   51:     array(1) {
   52:       [0]=>
   53:       %unicode|string%(%d) "%s"
   54:     }
   55:     [%u|b%"error"]=>
   56:     array(1) {
   57:       [0]=>
   58:       int(0)
   59:     }
   60:     [%u|b%"size"]=>
   61:     array(1) {
   62:       [0]=>
   63:       int(1)
   64:     }
   65:   }
   66: }
   67: array(0) {
   68: }

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>