| a666285 |
|
01-Jan-2013 |
Xinchen Hui <laruence@php.net> |
Happy New Year
/php-src/main/rfc1867.c
|
| 16bd110 |
|
03-Apr-2012 |
Klaus Silveira <contact@klaussilveira.com> |
Small performance improvement. The current code is correct, but if it is used inside a long loop or long strings, it's inefficient.
/php-src/main/rfc1867.c
|
| 2ad7f44 |
|
14-Feb-2012 |
Dmitry Stogov <dmitry@php.net> |
Improved max_input_vars directive to check nested variables
/php-src/main/rfc1867.c
|
| 7c3177e |
|
01-Jan-2012 |
Stanislav Malyshev <stas@php.net> |
fix bug #54374, bug #55500 - filter file names better, no dangling [s
/php-src/main/rfc1867.c
|
| 8775a37 |
|
01-Jan-2012 |
Felipe Pena <felipe@php.net> |
- Year++
/php-src/main/rfc1867.c
|
| 994df9f |
|
07-Sep-2011 |
Hannes Magnusson <bjori@php.net> |
Fixed bug #55504 (Content-Type header is not parsed correctly on HTTP POST request
/php-src/main/rfc1867.c
|
| cc1c7af |
|
22-Jul-2011 |
Pierre Joye <pajoye@php.net> |
- remove magic quotes support, functions are kept (see the NEWS entry for the details) for BC reasons but do not allow to set enable MQ
/php-src/main/rfc1867.c
|
| 2997719 |
|
12-Jun-2011 |
Felipe Pena <felipe@php.net> |
- Restore basename in filename on non Windows OS
/php-src/main/rfc1867.c
|
| 4a08317 |
|
13-Mar-2011 |
Pierrick Charron <pierrick@php.net> |
Remove unused variable
/php-src/main/rfc1867.c
|
| b2ddc6d |
|
06-Mar-2011 |
Moriyoshi Koizumi <moriyoshi@php.net> |
Fix ZTS build.
/php-src/main/rfc1867.c
|
| cdb9ee0 |
|
06-Mar-2011 |
Moriyoshi Koizumi <moriyoshi@php.net> |
Fix zend.multibyte oddities. Hope this will address all the known problems.
/php-src/main/rfc1867.c
|
| 86550a9 |
|
19-Jan-2011 |
Ilia Alshanetsky <iliaa@php.net> |
Win32 build fix
/php-src/main/rfc1867.c
|
| b5e12bd |
|
18-Jan-2011 |
Ilia Alshanetsky <iliaa@php.net> |
Fixed variable re-declaration
/php-src/main/rfc1867.c
|
| 0203cc3 |
|
01-Jan-2011 |
Felipe Pena <felipe@php.net> |
- Year++
/php-src/main/rfc1867.c
|
| 755c2cd |
|
08-Dec-2010 |
Dmitry Stogov <dmitry@php.net> |
Removed compile time dependency from ext/mbstring
/php-src/main/rfc1867.c
|
| dcb65e7 |
|
02-Dec-2010 |
Dmitry Stogov <dmitry@php.net> |
WS and cosmethic changes
/php-src/main/rfc1867.c
|
| e1aa908 |
|
04-Oct-2010 |
Gustavo André dos Santos Lopes <cataphract@php.net> |
- Implemented FR #50692, not uploaded files don't count towards
max_file_uploads limit.
- As a side improvement, temporary files are not opened for
empty uploads and, in debug mode, 0-length uploads.
/php-src/main/rfc1867.c
|
| 159cd69 |
|
17-Aug-2010 |
Kalle Sommer Nielsen <kalle@php.net> |
Fixed compiler warnings in main/
/php-src/main/rfc1867.c
|
| febee11 |
|
21-Apr-2010 |
Kalle Sommer Nielsen <kalle@php.net> |
Removed register_globals
/php-src/main/rfc1867.c
|
| f92fae2 |
|
18-Mar-2010 |
Andrei Zmievski <andrei@php.net> |
I am sorry I tried fixing PHP without extensive discussion on the mailing list.
I am sorry I tried fixing PHP without extensive discussion on the mailing list.
I am sorry I tried fixing PHP without extensive discussion on the mailing list.
Hope all the relevant parties are satisfied.
/php-src/main/rfc1867.c
|
| 3220f15 |
|
18-Mar-2010 |
Andrei Zmievski <andrei@php.net> |
Fix a few problems with large (2G-4G) file uploads. Added
--enable-large-uploads-fix switch because one change was in SAPI.h structure.
/php-src/main/rfc1867.c
|
| 9ba1e81 |
|
03-Jan-2010 |
Sebastian Bergmann <sebastian@php.net> |
sed -i "s#1997-2009#1997-2010#g" **/*.c **/*.h **/*.php
/php-src/main/rfc1867.c
|
| 72a9c6d |
|
29-Dec-2009 |
Jani Taskinen <jani@php.net> |
- Sync with HEAD
/php-src/main/rfc1867.c
|
| 1a64bb9 |
|
29-Dec-2009 |
Jani Taskinen <jani@php.net> |
- WS + CS + folding tags
/php-src/main/rfc1867.c
|
| c3230ad |
|
29-Dec-2009 |
Ilia Alshanetsky <iliaa@php.net> |
Fixed bug #48190 (Content-type parameter "boundary" is not case-insensitive in HTTP uploads).
/php-src/main/rfc1867.c
|
| 2e9c3ed |
|
17-Nov-2009 |
Rasmus Lerdorf <rasmus@php.net> |
Make it possible to disable post_max_size
/php-src/main/rfc1867.c
|
| 2e13e89 |
|
16-Nov-2009 |
Ilia Alshanetsky <iliaa@php.net> |
Simpify the max_file_uploads handling code
/php-src/main/rfc1867.c
|
| e2211ce |
|
27-Oct-2009 |
Ilia Alshanetsky <iliaa@php.net> |
Introduced a max_file_uploads INI setting, which is set to limit the
number of file uploads per-request to 100 by default, to prevent possible
DOS via temporary file exhaustion.
/php-src/main/rfc1867.c
|
| 08659c2 |
|
31-Dec-2008 |
Sebastian Bergmann <sebastian@php.net> |
MFH: Bump copyright year, 3 of 3.
/php-src/main/rfc1867.c
|
| f5dd8c0 |
|
20-Oct-2008 |
Arnaud Le Blanc <lbarnaud@php.net> |
WS
/php-src/main/rfc1867.c
|
| 0f31ed2 |
|
20-Oct-2008 |
Arnaud Le Blanc <lbarnaud@php.net> |
Better fix for #46313
/php-src/main/rfc1867.c
|
| c98e287 |
|
20-Oct-2008 |
Arnaud Le Blanc <lbarnaud@php.net> |
Fixed #46313 (Magic quotes broke $_FILES)
# magic_quotes_gpc was disabled during registration of $_FILES["x"]["tmp_name"]
# and $GLOBALS["x"] (which is tmp_name with register_globals enabled). This
# caused "x" to not be escaped so there was 2 different keys for the same file
# in $_FILES, one with tmp_name and the other without.
# All other variables (name, size, etc) are registered with magic_quotes_gpc
# untouched, both in $_FILES and $GLOBALS and I did not found a reason for
# disabling it for tmp_name.
/php-src/main/rfc1867.c
|
| 8a77e55 |
|
23-Sep-2008 |
Nuno Lopes <nlopess@php.net> |
clean some dead code (with static analysis help)
/php-src/main/rfc1867.c
|
| ef38ff6 |
|
07-Sep-2008 |
Arnaud Le Blanc <lbarnaud@php.net> |
MFH: More accurate max_file_size / upload_max_filesize (fixes #45124)
/php-src/main/rfc1867.c
|
| 898ff10 |
|
06-Sep-2008 |
Arnaud Le Blanc <lbarnaud@php.net> |
MFH: Fixed #43540 (rfc1867 handler newlength problem)
/php-src/main/rfc1867.c
|
| 8f6b35c |
|
14-Mar-2008 |
Antony Dovgal <tony2001@php.net> |
MFH: check if return value of write() is -1 and abort upload in this case setting the correct error status
/php-src/main/rfc1867.c
|
| d1dded8 |
|
31-Dec-2007 |
Sebastian Bergmann <sebastian@php.net> |
MFH: Bump copyright year, 2 of 2.
/php-src/main/rfc1867.c
|
| 20aa854 |
|
17-Jul-2007 |
Ilia Alshanetsky <iliaa@php.net> |
Allow file uploads to bypass open_basedir checks (fixes regression)
/php-src/main/rfc1867.c
|
| 24fa61e |
|
24-Feb-2007 |
Marcus Boerger <helly@php.net> |
- Drop superflous efree
/php-src/main/rfc1867.c
|
| 50ea267 |
|
24-Feb-2007 |
Marcus Boerger <helly@php.net> |
- Avoid sprintf, even when checked copy'n'paste or changes lead to errors
/php-src/main/rfc1867.c
|
| 4223aa4 |
|
01-Jan-2007 |
Sebastian Bergmann <sebastian@php.net> |
MFH: Bump year.
/php-src/main/rfc1867.c
|
| abfc08d |
|
29-Sep-2006 |
Stefan Esser <sesser@php.net> |
If one name is disallowed don't drop all files
/php-src/main/rfc1867.c
|
| 1e8fc23 |
|
19-Sep-2006 |
Stefan Esser <sesser@php.net> |
Delete empty temporary files if file upload hook forbids the upload
/php-src/main/rfc1867.c
|
| 935b0c8 |
|
09-Sep-2006 |
Rasmus Lerdorf <rasmus@php.net> |
Minor tweak to the file upload hooks. The MULTIPART_EVENT_FORMDATA event
was only triggering when an input filter was applied. This simple change
makes the event also trigger when no filter is applied. The newlength
pointer is set to NULL to let a downstream module differentiate between
the two cases.
/php-src/main/rfc1867.c
|
| cfda15f |
|
27-Jul-2006 |
Ilia Alshanetsky <iliaa@php.net> |
Binary safe multipart request handling
/php-src/main/rfc1867.c
|
| cfac29e |
|
22-Jul-2006 |
Stefan Esser <sesser@php.net> |
Added RFC1867 fileupload processing hook.
/php-src/main/rfc1867.c
|
| 5bd9322 |
|
01-Jan-2006 |
foobar <sniper@php.net> |
bump year and license version
/php-src/main/rfc1867.c
|
| 23e671a |
|
03-Aug-2005 |
foobar <sniper@php.net> |
- Bumber up year
/php-src/main/rfc1867.c
|
| 85e2378 |
|
13-Jul-2005 |
Ilia Alshanetsky <iliaa@php.net> |
Fixed bug #33673 (Added detection for partially uploaded files).
/php-src/main/rfc1867.c
|
| 4558cda |
|
04-Apr-2005 |
Uwe Schindler <thetaphi@php.net> |
Bug #32491 (File upload error - unable to create a temporary file) - Changing file upload from stdio to posix
/php-src/main/rfc1867.c
|
| 7ee1fdb |
|
15-Feb-2005 |
Ilia Alshanetsky <iliaa@php.net> |
Prune uploaded file names to \ on all OSes, read comments for explanation.
/php-src/main/rfc1867.c
|
| d179e6a |
|
01-Feb-2005 |
Ilia Alshanetsky <iliaa@php.net> |
Final version of filename upload handling.
/php-src/main/rfc1867.c
|
| 71695f8 |
|
24-Jan-2005 |
Ilia Alshanetsky <iliaa@php.net> |
Use multibyte specific code for handling files and generic basename based
code in all other instances.
/php-src/main/rfc1867.c
|
| 76d91f2 |
|
24-Jan-2005 |
Moriyoshi Koizumi <moriyoshi@php.net> |
- Revert irrelevant part.
/php-src/main/rfc1867.c
|
| 844cc09 |
|
20-Jan-2005 |
Ilia Alshanetsky <iliaa@php.net> |
Fixed bug #31398 (When magic_guotes_gpc are enabled filenames with '
get cutoff).
/php-src/main/rfc1867.c
|
| 224201e |
|
20-Nov-2004 |
Stefan Esser <sesser@php.net> |
Fixed: strip quotes from filename
/php-src/main/rfc1867.c
|
| f41c40f |
|
11-Nov-2004 |
Ilia Alshanetsky <iliaa@php.net> |
Fixed bug #30750 (Meaningful error message when upload directory is not
accessible).
/php-src/main/rfc1867.c
|
| 0f860d8 |
|
13-Sep-2004 |
Stefan Esser <sesser@php.net> |
only allow valid arrays at this point
/php-src/main/rfc1867.c
|
| e7d698c |
|
12-Sep-2004 |
Stefan Esser <sesser@php.net> |
New Rule: Never try to repair potential malicious user input
/php-src/main/rfc1867.c
|
| 883e096 |
|
11-Aug-2004 |
Sara Golemon <pollita@php.net> |
Minor format specifier fixes
/php-src/main/rfc1867.c
|
| 86efab2 |
|
25-Jul-2004 |
Ilia Alshanetsky <iliaa@php.net> |
Fixed bug #29369 (Uploaded files with ' or " in their names get their names
truncated at those characters).
/php-src/main/rfc1867.c
|
| e5cfb1d |
|
10-Jul-2004 |
Andi Gutmans <andi@php.net> |
- Better stability during premature shutdown of request startup
/php-src/main/rfc1867.c
|
| bed3f4c |
|
23-May-2004 |
Stefan Esser <sesser@php.net> |
This is more correct.
/php-src/main/rfc1867.c
|
| cb1e4ab |
|
21-May-2004 |
Derick Rethans <derick@php.net> |
- Fixed TSRM problem in latest commit.
/php-src/main/rfc1867.c
|
| bc7ad69 |
|
21-May-2004 |
Derick Rethans <derick@php.net> |
- Fixed bug #28456 (Problem with enclosed / in uploaded file names)
/php-src/main/rfc1867.c
|
| 500f634 |
|
11-May-2004 |
Derick Rethans <derick@php.net> |
- Fixed defines
/php-src/main/rfc1867.c
|
| fe576c7 |
|
25-Mar-2004 |
Derick Rethans <derick@php.net> |
- Stopped file uploads from throwing E_WARNINGs and E_NOTICEs which can not be
hidden from within scripts (and a result value in the $_FILES global can be
used to see the real failure anyway).
/php-src/main/rfc1867.c
|
| 9ff10d0 |
|
24-Mar-2004 |
Derick Rethans <derick@php.net> |
- Revert bogus commit
/php-src/main/rfc1867.c
|
| 2face60 |
|
24-Mar-2004 |
Derick Rethans <derick@php.net> |
- Fixed NEWS
#- Can we *please* keep this in order?
/php-src/main/rfc1867.c
|
| debf069 |
|
12-Feb-2004 |
Stefan Esser <sesser@php.net> |
better write into the correct buffer
/php-src/main/rfc1867.c
|
| dbeb415 |
|
08-Jan-2004 |
Andi Gutmans <andi@php.net> |
- A belated happy holidays and PHP 5
/php-src/main/rfc1867.c
|
| 8eb22d7 |
|
07-Dec-2003 |
Derick Rethans <derick@php.net> |
- Add comment, I put this ina week ago and it already confused me :)
/php-src/main/rfc1867.c
|
| 750b033 |
|
29-Nov-2003 |
Derick Rethans <derick@php.net> |
- Fix sapi_input_filter patch. Returning 1 from the filter handler should
make PHP register the variable, returning 0 shouldn't. The new length of
the variables being filtered is now returned in the new_val_len argument
of the function.
/php-src/main/rfc1867.c
|
| 370dfd3 |
|
26-Nov-2003 |
Derick Rethans <derick@php.net> |
- Prevent registration of the variable when a zero-length is returned
from the sapi_input_filter.
/php-src/main/rfc1867.c
|
| befbd6d |
|
12-Nov-2003 |
Stefan Esser <sesser@php.net> |
Fix odd increments to repair the boundary checks.
/php-src/main/rfc1867.c
|
| 744212a |
|
05-Nov-2003 |
Rui Hirokawa <hirokawa@php.net> |
added buffer reallocation for filename.
/php-src/main/rfc1867.c
|
| b763dd4 |
|
03-Nov-2003 |
Stefan Esser <sesser@php.net> |
Fixed possible crashbug.
/php-src/main/rfc1867.c
|
| f670f9c |
|
03-Nov-2003 |
Stefan Esser <sesser@php.net> |
It is usually a good idea to write only into allocated bufferspace.
/php-src/main/rfc1867.c
|
| 0ce6378 |
|
22-Oct-2003 |
Rui Hirokawa <hirokawa@php.net> |
name/value in multipart/form-date will be converted into internal encoding when mbstring.encoding_translation is On.
/php-src/main/rfc1867.c
|
| fd9d9de |
|
03-Jul-2003 |
Moriyoshi Koizumi <moriyoshi@php.net> |
Fix build
/php-src/main/rfc1867.c
|
| 50d3650 |
|
03-Jul-2003 |
foobar <sniper@php.net> |
Cut the long line a bit for readability..
/php-src/main/rfc1867.c
|
| a96aa89 |
|
03-Jul-2003 |
Ilia Alshanetsky <iliaa@php.net> |
Compiler warning fix.
/php-src/main/rfc1867.c
|
| 2b44c63 |
|
28-Jun-2003 |
Rui Hirokawa <hirokawa@php.net> |
Fixed corruption of multibyte character including 0x5c as second
byte in multipart/form-data.
/php-src/main/rfc1867.c
|
| f68c7ff |
|
10-Jun-2003 |
James Cox <imajes@php.net> |
updating license information in the headers.
/php-src/main/rfc1867.c
|
| dccf33b |
|
23-May-2003 |
Sara Golemon <pollita@php.net> |
MFB(r-1.122.2.10)
Bug#23765 File upload handler should not care about case sensitivity of header values.
/php-src/main/rfc1867.c
|
| 4e6997d |
|
05-Mar-2003 |
Ilia Alshanetsky <iliaa@php.net> |
Fixed bug #22550 (overflow protection for upload_max_filesize ini setting).
/php-src/main/rfc1867.c
|
| d08a0e9 |
|
20-Feb-2003 |
Rasmus Lerdorf <rasmus@php.net> |
An input filter might not simply strip stuff, it might also turn things
into entities or use some other mechanism which causes the filtered data
to be longer than the original data. Ergo, pass in the address of the
buffer instead so the filter is free to reallocate it.
/php-src/main/rfc1867.c
|
| 7429c2d |
|
19-Feb-2003 |
Rasmus Lerdorf <rasmus@php.net> |
Input Filter support. See README.input_filter for details.
@- Input Filter support added. See README.input_filter. (Rasmus)
/php-src/main/rfc1867.c
|
| 8e3f23e |
|
19-Feb-2003 |
foobar <sniper@php.net> |
ws fixes + missing $Id$ tags, headers added
/php-src/main/rfc1867.c
|
| 58d65ab |
|
06-Jan-2003 |
Stefan Esser <sesser@php.net> |
Adding support for anonymous fileuploads (#21450)
/php-src/main/rfc1867.c
|
| 2c5d4b8 |
|
31-Dec-2002 |
Sebastian Bergmann <sebastian@php.net> |
Bump year.
/php-src/main/rfc1867.c
|
| 1f50681 |
|
29-Dec-2002 |
Ilia Alshanetsky <iliaa@php.net> |
Fixed bug #21149 (fixed handling of unterminated '[').
/php-src/main/rfc1867.c
|
| 75d8056 |
|
14-Dec-2002 |
Stefan Esser <sesser@php.net> |
cleanup
/php-src/main/rfc1867.c
|
| 3c9a6a8 |
|
10-Dec-2002 |
Ilia Alshanetsky <iliaa@php.net> |
Removed one more unneeded check.
/php-src/main/rfc1867.c
|
| ecc9c53 |
|
10-Dec-2002 |
Ilia Alshanetsky <iliaa@php.net> |
Removed a pointless check. Thanks Stefan.
/php-src/main/rfc1867.c
|
| 8425dbd |
|
07-Dec-2002 |
Ilia Alshanetsky <iliaa@php.net> |
Fixed bugs #20725 & #20860. Post form variables get lost if the uploaded
files cannot be written to disk.
/php-src/main/rfc1867.c
|
| 9dae147 |
|
22-Nov-2002 |
Stefan Esser <sesser@php.net> |
little fix
/php-src/main/rfc1867.c
|
| 658fd1b |
|
14-Nov-2002 |
Stefan Esser <sesser@php.net> |
Fixing possible remote overflow due to mbstring translation.
/php-src/main/rfc1867.c
|
| e8be0db |
|
24-Oct-2002 |
Moriyoshi Koizumi <moriyoshi@php.net> |
Fixed build when mbstring is not used - my previous patch is insufficient.
/php-src/main/rfc1867.c
|
| 73ca375 |
|
24-Oct-2002 |
Moriyoshi Koizumi <moriyoshi@php.net> |
MFH; we would see a nasty problem again if it was not fixed...
/php-src/main/rfc1867.c
|
| 74883a9 |
|
23-Oct-2002 |
Moriyoshi Koizumi <moriyoshi@php.net> |
Make php_mb_is_mb_leadbyte() obsolete. It only works with double-byte chars.
# Sorry Marcus, it seems we were working simultaneously :)
/php-src/main/rfc1867.c
|
| afa9f42 |
|
23-Oct-2002 |
Moriyoshi Koizumi <moriyoshi@php.net> |
Function renaming.
/php-src/main/rfc1867.c
|
| b770355 |
|
23-Oct-2002 |
Moriyoshi Koizumi <moriyoshi@php.net> |
Remaned the functions for consistency
/php-src/main/rfc1867.c
|
| 46f4a07 |
|
07-Oct-2002 |
Stefan Esser <sesser@php.net> |
Closing protected variables hole
/php-src/main/rfc1867.c
|
| 20693c1 |
|
17-Aug-2002 |
Stefan Esser <sesser@php.net> |
IE does not use quotes but now we are safe...
/php-src/main/rfc1867.c
|
| ecaa0a0 |
|
17-Aug-2002 |
Stefan Esser <sesser@php.net> |
fixed the user supplied patch for bug #18792
/php-src/main/rfc1867.c
|
| 6c22f90 |
|
16-Aug-2002 |
Dan Kalowsky <kalowsky@php.net> |
Fix for bug #18792 submitted by t.bubeck@reinform.de
# talked this over with sterling and he believes it shouldn't break anything
# although there might be a need/desire to check for both ',' and ';'
/php-src/main/rfc1867.c
|
| 6f822fd |
|
08-Aug-2002 |
Stefan Esser <sesser@php.net> |
A full hard disk is no reason to leak memory...
/php-src/main/rfc1867.c
|
| de8c36d |
|
02-Aug-2002 |
Marcus Boerger <helly@php.net> |
-use const to clarify code
-fix tsrmls build (therefore rfc1867.c)
/php-src/main/rfc1867.c
|
| 7527bf0 |
|
02-Aug-2002 |
Rui Hirokawa <hirokawa@php.net> |
made sapi_register_treat_data() to support multibyte input encoding translation without MBSTR_ENC_TRANS and changed php_treat_data to php_default_treat_data.
/php-src/main/rfc1867.c
|
| 11ac4e0 |
|
15-Jul-2002 |
Stefan Esser <sesser@php.net> |
use Zend API to access llist count
/php-src/main/rfc1867.c
|
| 02d3e99 |
|
14-Jul-2002 |
foobar <sniper@php.net> |
IF --disable-mbstr-enc-trans is used OR mbstring is compiled as shared
extension, these functions are not available.
/php-src/main/rfc1867.c
|
| ed58d3a |
|
12-Jul-2002 |
foobar <sniper@php.net> |
- Added predefined constants for the upload errors.
- Removed the debugging error (not useful for end-users)
/php-src/main/rfc1867.c
|
| 6a83870 |
|
05-Jul-2002 |
foobar <sniper@php.net> |
Fix typo
/php-src/main/rfc1867.c
|
| ead78e9 |
|
05-Jul-2002 |
Rui Hirokawa <hirokawa@php.net> |
fixed shift_jis character corruption including 0x5c as second byte following a slash on uploaded filename.
/php-src/main/rfc1867.c
|
| 0e52055 |
|
03-Jul-2002 |
Sebastian Bergmann <sebastian@php.net> |
Fix ZTS build.
/php-src/main/rfc1867.c
|
| bb21c40 |
|
03-Jul-2002 |
Rui Hirokawa <hirokawa@php.net> |
fixed shift_jis character corruption including 0x5c as second byte on uploaded filename.
/php-src/main/rfc1867.c
|
| 5956656 |
|
07-Jun-2002 |
Stefan Esser <sesser@php.net> |
- Stay always in buffer
/php-src/main/rfc1867.c
|
| 23ceadf |
|
05-Jun-2002 |
Stefan Esser <sesser@php.net> |
fixed multiline header detection (':' is valid within following lines)
fixed fill_buffer to fill the buffer always completely
/php-src/main/rfc1867.c
|
| a06a3e1 |
|
05-Jun-2002 |
Stefan Esser <sesser@php.net> |
fixing some crashbugs that can be triggered with bogus uploads.
/php-src/main/rfc1867.c
|
| f3c71c4 |
|
31-May-2002 |
Derick Rethans <derick@php.net> |
- Don't issue a notice when no file was uploaded
/php-src/main/rfc1867.c
|
| 19b7861 |
|
11-May-2002 |
Zeev Suraski <zeev@php.net> |
0 byte file uploads are valid, avoid choking on them
/php-src/main/rfc1867.c
|
| ae2e36a |
|
23-Apr-2002 |
foobar <sniper@php.net> |
Changed the error for 'no upload' to E_NOTICE so that it doesn't
pollute the logs too much.
@- Fixed possible crash bug in HTTP uploads. (Patch: Lucas Schroeder)
/php-src/main/rfc1867.c
|
| bccfe80 |
|
01-Apr-2002 |
foobar <sniper@php.net> |
Prevent crashing with some bogus POSTs.
/php-src/main/rfc1867.c
|
| f43ca8d |
|
30-Mar-2002 |
foobar <sniper@php.net> |
Fixed a bug with file_uploads=off -> normal post variables not set.
/php-src/main/rfc1867.c
|
| 2872bce |
|
10-Mar-2002 |
Stefan Esser <sesser@php.net> |
Fix: Now returns correct Content-Type with Opera 6.01
/php-src/main/rfc1867.c
|
| e680959 |
|
09-Jan-2002 |
jim winstead <jimw@php.net> |
Move type-handling functions into ext/standard/type.c (which had
a few otherwise unused functions in it).
/php-src/main/rfc1867.c
|
| 2720dc3 |
|
04-Jan-2002 |
Jon Parise <jon@php.net> |
Nuke unused variable warning (end_arr).
/php-src/main/rfc1867.c
|
| 99e72c9 |
|
16-Dec-2001 |
Stefan Esser <sesser@php.net> |
whitespace. - now i know how code should look like ...
/php-src/main/rfc1867.c
|
| dce6ba9 |
|
16-Dec-2001 |
Stefan Esser <sesser@php.net> |
fixed: php_ap_getword was unaware of quotes
filenames with ; in it could not get uploaded
fixed: php_ap_getword_conf sometimes returned a static
string that crashs php when freed
(f.e. uploading the file "crash; name= ;"
crashed php)
fixed: magic_quotes was disabled while filling
variables with user supplied input
fixed: memoryleak (some strings did not get freed)
fixed: assuming that adress of "" is always the same
may fail on some compilers
/php-src/main/rfc1867.c
|
| 58a5b6b |
|
13-Dec-2001 |
Stefan Esser <sesser@php.net> |
fixed some minor bugs and reordered some code to fix array uploads.
/php-src/main/rfc1867.c
|
| 3893351 |
|
11-Dec-2001 |
Sebastian Bergmann <sebastian@php.net> |
Update headers.
/php-src/main/rfc1867.c
|
| 2605bd4 |
|
05-Dec-2001 |
foobar <sniper@php.net> |
Store the read bytes so that some sapi modules know how much to read.
/php-src/main/rfc1867.c
|
| 6083eb1 |
|
24-Nov-2001 |
foobar <sniper@php.net> |
- Handle more error types when uploading files.
/php-src/main/rfc1867.c
|
| ee111cf |
|
24-Nov-2001 |
Zeev Suraski <zeev@php.net> |
whitespace
/php-src/main/rfc1867.c
|
| a25ccbe |
|
24-Nov-2001 |
Zeev Suraski <zeev@php.net> |
whitespace
/php-src/main/rfc1867.c
|
| 1e5e73e |
|
16-Nov-2001 |
foobar <sniper@php.net> |
- Nuked some memleaks
- Changed the error to be set always. Otherwise the index for error
wouldn't be correct in case of uploading multiple files within array.
( <input type="file" name="test[]"> )
/php-src/main/rfc1867.c
|
| 37dec69 |
|
16-Nov-2001 |
foobar <sniper@php.net> |
No use of populating the hash if there is no file saved.
/php-src/main/rfc1867.c
|
| ae82e1c |
|
15-Nov-2001 |
foobar <sniper@php.net> |
In case of submitting form without any files selected don't set
the tmp_name.
/php-src/main/rfc1867.c
|
| b893e59 |
|
11-Nov-2001 |
foobar <sniper@php.net> |
Make the filesize 0 when upload fails. And changed the error messages to be different from each other.
/php-src/main/rfc1867.c
|
| 7d479f4 |
|
11-Nov-2001 |
foobar <sniper@php.net> |
Fix for bug: #14008. Still needs some minor changes but should give idea about this.
/php-src/main/rfc1867.c
|
| d6adcc9 |
|
29-Oct-2001 |
foobar <sniper@php.net> |
After discussing with Rasmus, this line should be enough. Speak up if it is not.
/php-src/main/rfc1867.c
|
| 3be12d1 |
|
29-Oct-2001 |
foobar <sniper@php.net> |
- Added myself to authors.
- Modified the clause about Apache to say what exactly was borrowed.
Should there be the Apache license included in this file?
/php-src/main/rfc1867.c
|
| 44b6812 |
|
27-Oct-2001 |
foobar <sniper@php.net> |
@- Fixed HTTP file upload support to handle big files better. (Jani)
# There are some minor memleaks still..I tried to eliminate them but
# without luck. I'd be glad if someone could check this code out.
# Also, this uses the Apache libapreq. So there might be need to add some
# license thingie there too?
/php-src/main/rfc1867.c
|
| c033288 |
|
25-Sep-2001 |
Jeroen van Wolffelaar <jeroen@php.net> |
Back-substitute for Z_* macro's. If it breaks some extension (the script isn't optimal, it parses for example var->zval.value incorrect) please let me know.
/php-src/main/rfc1867.c
|
| 315c894 |
|
23-Sep-2001 |
Andi Gutmans <andi@php.net> |
- Commit fix for bug #11998 by Ralf Bolte <r.bolte@gmx.net>
/php-src/main/rfc1867.c
|
| 78747bd |
|
09-Sep-2001 |
Derick Rethans <derick@php.net> |
- Don't wrap lines... this is annoying while coding.
/php-src/main/rfc1867.c
|
| e46deca |
|
03-Sep-2001 |
foobar <sniper@php.net> |
First step for chunkifying the HTTP uploads.
/php-src/main/rfc1867.c
|
| 0dab84d |
|
15-Aug-2001 |
Daniel Beulshausen <dbeu@php.net> |
fix SAPI_POST_* exports
/php-src/main/rfc1867.c
|
| 1159c84 |
|
05-Aug-2001 |
Zeev Suraski <zeev@php.net> |
- TSRMLS_FETCH work
- whitespace fixes
/php-src/main/rfc1867.c
|
| d76cf1d |
|
31-Jul-2001 |
Zeev Suraski <zeev@php.net> |
More TSRMLS_FETCH work
/php-src/main/rfc1867.c
|
| d87cc97 |
|
28-Jul-2001 |
Zeev Suraski <zeev@php.net> |
Redesigned thread safety mechanism - nua nua
/php-src/main/rfc1867.c
|
| fe6f871 |
|
27-Jul-2001 |
Zeev Suraski <zeev@php.net> |
- Get rid of ELS_*(), and use TSRMLS_*() instead.
- Move to the new ts_allocate_id() API
This patch is *bound* to break some files, as I must have had typos somewhere.
If you use any uncommon extension, please try to build it...
/php-src/main/rfc1867.c
|
| a9915bf |
|
16-Jul-2001 |
Zeev Suraski <zeev@php.net> |
Another layout fix
/php-src/main/rfc1867.c
|
| b6064e5 |
|
16-Jul-2001 |
Zeev Suraski <zeev@php.net> |
Fix layout
Guys - when submitting patches - please make sure you're not breaking
the layout of the code! It's not less important than the patch
itself.
/php-src/main/rfc1867.c
|
| b0ed727 |
|
19-Jun-2001 |
foobar <sniper@php.net> |
Fix one problem with Opera browsers. Tested with IE,NS,Opera.
There can be also a \t before the 'filename=' part.
/php-src/main/rfc1867.c
|
| 81e2cf0 |
|
06-Jun-2001 |
Rasmus Lerdorf <rasmus@php.net> |
Fix folding and clean up some extensions
/php-src/main/rfc1867.c
|
| 25c3a3a |
|
05-Jun-2001 |
Rasmus Lerdorf <rasmus@php.net> |
vim-6 does folding - clean up a bunch of missing folding tags plus
some misguided RINIT and RSHUTDOWN calls in a few fringe extensions
/php-src/main/rfc1867.c
|
| bf417a3 |
|
02-May-2001 |
foobar <sniper@php.net> |
Now the file uploads 'work' also on Lynx. This patch was submitted
by Andreas Pistoor <andreas@erestor.f2s.com> and I have tested it a
quite long time now and didn't notive any problems. Bug: #9930
/php-src/main/rfc1867.c
|
| 4c823e8 |
|
30-Apr-2001 |
Andi Gutmans <andi@php.net> |
- Change macros from V_ to VCWD_ because of AIX name clash
/php-src/main/rfc1867.c
|
| eb6ba01 |
|
26-Feb-2001 |
Andi Gutmans <andi@php.net> |
- Fix copyright notices with 2001
/php-src/main/rfc1867.c
|
| 96ba644 |
|
19-Jan-2001 |
Sascha Schumann <sas@php.net> |
Make the code match the comment.
Prior to this change, the upload code tried to add mangled names to
the global HTTP_POST_FILES array, resulting in all kind of weird behaviour.
After this change, multi-dimensional form elements are treated correctly
and consistently.
/php-src/main/rfc1867.c
|
| f8522c7 |
|
15-Jan-2001 |
Zeev Suraski <zeev@php.net> |
Use free_estring()
/php-src/main/rfc1867.c
|
| 5d8e3c3 |
|
13-Jan-2001 |
Sascha Schumann <sas@php.net> |
arr_index errorneusly included the trailing ']' character, so that
variable names like Data_name[Image]] were passed to the register functions.
/php-src/main/rfc1867.c
|
| ea46f79 |
|
03-Jan-2001 |
Stanislav Malyshev <stas@php.net> |
Fix #8486 (name= without quotes in MIME Content-Disposition header)
Ported fix by kk/sas from PHP 3
/php-src/main/rfc1867.c
|
| c9f1fe6 |
|
08-Dec-2000 |
Rasmus Lerdorf <rasmus@php.net> |
Fix off by one error in file upload code
/php-src/main/rfc1867.c
|
| 1f7a3b3 |
|
30-Oct-2000 |
Stanislav Malyshev <stas@php.net> |
Remove empty temp file on failed upload
/php-src/main/rfc1867.c
|
| 836df2f |
|
20-Oct-2000 |
Sascha Schumann <sas@php.net> |
Parse quoted boundary correctly
/php-src/main/rfc1867.c
|
| 9e5ef06 |
|
17-Oct-2000 |
Zeev Suraski <zeev@php.net> |
Fix warning
/php-src/main/rfc1867.c
|
| 824fc6a |
|
11-Sep-2000 |
Andi Gutmans <andi@php.net> |
- Move php_open_temporary_file() out of file.c
/php-src/main/rfc1867.c
|
| b7ecaac |
|
09-Sep-2000 |
Zeev Suraski <zeev@php.net> |
More security-related (control) patches:
- Avoid displaying errors during startup, unless display_startup_errors is enabled.
- Implemented post_size_max limit. Defaults to 8MB.
- Implemented file_uploads on/off directive (defaults to on).
/php-src/main/rfc1867.c
|
| 6c4cb4c |
|
09-Sep-2000 |
Zeev Suraski <zeev@php.net> |
Security related updates:
- Introduce php_open_temporary_file(), in place of tempnam(). Still
needs testing under UNIX (mkstemp()), works reliably under Windows now.
- Reimplement the mechanism for unlinking uploaded files at the end of the request
(was it ever tested?). Files moved with move_uploaded_file() will not be unlink()'d
again, to avoid (albeit very unlikely) race conditions.
/php-src/main/rfc1867.c
|
| 75086e3 |
|
08-Sep-2000 |
Zeev Suraski <zeev@php.net> |
- Implemented is_upload_file()
/php-src/main/rfc1867.c
|
| 677d4b9 |
|
07-Sep-2000 |
Zeev Suraski <zeev@php.net> |
Send $HTTP_POST_FILES to the right place
/php-src/main/rfc1867.c
|
| eb32144 |
|
05-Sep-2000 |
Zeev Suraski <zeev@php.net> |
- Remove track_vars - it is now always on
- Make the various $HTTP_*_VARS[] arrays be defined always,
even if they're empty
- Fix Win32 build and warnings
/php-src/main/rfc1867.c
|
| efdd392 |
|
04-Sep-2000 |
Zeev Suraski <zeev@php.net> |
Protect arrays as well.
/php-src/main/rfc1867.c
|
| 5dca992 |
|
04-Sep-2000 |
Zeev Suraski <zeev@php.net> |
Prevent exploit in [tmp_name] as well
/php-src/main/rfc1867.c
|
| 60825fa |
|
04-Sep-2000 |
Zeev Suraski <zeev@php.net> |
Fix the logic. Tested.
/php-src/main/rfc1867.c
|
| 388170f |
|
04-Sep-2000 |
Zeev Suraski <zeev@php.net> |
3rd time's a charm
/php-src/main/rfc1867.c
|
| b470506 |
|
04-Sep-2000 |
Zeev Suraski <zeev@php.net> |
Fix the fix
/php-src/main/rfc1867.c
|
| ed453cc |
|
04-Sep-2000 |
Zeev Suraski <zeev@php.net> |
Fix the file upload security problem with no side effects (untested)
/php-src/main/rfc1867.c
|
| 43fefff |
|
04-Sep-2000 |
Rasmus Lerdorf <rasmus@php.net> |
Quick-fix for the file upload security alert
@Quick-fix for the file upload security alert (Rasmus)
/php-src/main/rfc1867.c
|
| da1b784 |
|
06-Aug-2000 |
Rasmus Lerdorf <rasmus@php.net> |
Support content-encoding headers in file upload mime parts
@- Support content-encoding headers in file upload MIME parts
@ (Ragnar Kjørstad)
/php-src/main/rfc1867.c
|
| a790966 |
|
30-Jul-2000 |
Stanislav Malyshev <stas@php.net> |
Fix file upload types array handling (#5836)
/php-src/main/rfc1867.c
|
| 76061b7 |
|
04-Jun-2000 |
Rasmus Lerdorf <rasmus@php.net> |
@ Add support for both indexed and non-indexed arrays of file uploads
@ eg. name="file[]" type="file" (Rasmus)
Add support for both indexed and non-indexed arrays of file uploads
eg. name="file[]" type="file" (Rasmus)
/php-src/main/rfc1867.c
|
| e043439 |
|
18-May-2000 |
Zeev Suraski <zeev@php.net> |
Update the license with the new clause 6
/php-src/main/rfc1867.c
|
| 1665cba |
|
15-Apr-2000 |
Andi Gutmans <andi@php.net> |
- Change PHP_ to V_ (directory & file functions)
/php-src/main/rfc1867.c
|
| 69ff396 |
|
02-Apr-2000 |
Zeev Suraski <zeev@php.net> |
*** empty log message ***
/php-src/main/rfc1867.c
|
| 18e0850 |
|
02-Apr-2000 |
Zeev Suraski <zeev@php.net> |
@- Add $HTTP_POST_FILES[filename][tmp_name] - it was previously impossible to
@ retrieve the temporary name of an uploaded file using $HTTP_POST_FILES[] (Zeev)
- Changed IMAP Win32 definitions
/php-src/main/rfc1867.c
|
| 9df7df3 |
|
30-Mar-2000 |
Andi Gutmans <andi@php.net> |
- Baby steps... Use PHP_FOPEN()
/php-src/main/rfc1867.c
|
| e5c8aeb |
|
26-Feb-2000 |
Zeev Suraski <zeev@php.net> |
- Protect $HTTP_POST_FILES[] as well
/php-src/main/rfc1867.c
|
| 9b621d1 |
|
19-Feb-2000 |
Zeev Suraski <zeev@php.net> |
Get the license right... (this won't make it to RC1 of B4)
/php-src/main/rfc1867.c
|
| 739bdec |
|
19-Feb-2000 |
Zeev Suraski <zeev@php.net> |
Worked on beautifying rfc1867.c a bit
@- Introduced $HTTP_POST_FILES[], that contains information about files uploaded
@ through HTTP upload (Zeev)
/php-src/main/rfc1867.c
|
| a6393de |
|
17-Feb-2000 |
Zeev Suraski <zeev@php.net> |
Make POST handling the way it should be. RFC1867, and any future POST handlers we might
have in the future now obey to the variables_order directive, and there's a real way modular
way to handle POST content.
This is all untested, BEFORE_SAPI_POST_PATCH_17_FEB_2000 tagged before submission
@- Made multipart/form-data content obey to the variables_order directive (Zeev)
/php-src/main/rfc1867.c
|
| 4a211a8 |
|
15-Feb-2000 |
Zeev Suraski <zeev@php.net> |
@- Fixed RFC1867 file upload under Windows (Zeev)
Fixed a memory leak
/php-src/main/rfc1867.c
|
| 829f4f3 |
|
12-Feb-2000 |
Thies C. Arntzen <thies@php.net> |
@- Workaround for bogus POST-Data from IE/Mac. (Thies)
@ Patch by Alain Malek <alain@virtua.ch>
fix #2944
/php-src/main/rfc1867.c
|
| b2449f9 |
|
29-Jan-2000 |
Zeev Suraski <zeev@php.net> |
- Change the argument order of php_register_variable() to something more
intuitive.
- Make the authentication variables be a part of the HTTP_SERVER_VARS[] array
/php-src/main/rfc1867.c
|
| 9ab35ae |
|
28-Jan-2000 |
Zeev Suraski <zeev@php.net> |
Tried to centralize global variable registration as much as possible:
- Added $HTTP_ENV_VARS[] and $HTTP_SERVER_VARS[] support, which similarly
to $HTTP_GET_VARS[], contain environment and server variables. Setting
register_globals to Off will now also prevent registration of the
environment and server variables into the global scope (Zeev)
- Renamed gpc_globals to register_globals (Zeev)
- Introduced variables_order that deprecates gpc_order, and allows control
over the server and environment variables, in addition to GET/POST/Cookies
(Zeev)
/php-src/main/rfc1867.c
|
| 270eff1 |
|
28-Jan-2000 |
Zeev Suraski <zeev@php.net> |
Use a more general and descriptive name
/php-src/main/rfc1867.c
|
| fc67810 |
|
28-Jan-2000 |
Zeev Suraski <zeev@php.net> |
post.c really had nothing to do with POST anymore, and it belongs to the top level directory
/php-src/main/rfc1867.c
|
| 3a35a69 |
|
28-Jan-2000 |
Zeev Suraski <zeev@php.net> |
Get rid of the old implementation
/php-src/main/rfc1867.c
|
| 43ae2bf |
|
01-Jan-2000 |
Sascha Schumann <sas@php.net> |
Happy Y2K patch! Happy new year (or the new millennium, depending on whether
you start counting at 0 or 1).
/php-src/main/rfc1867.c
|
| 235386b |
|
26-Dec-1999 |
Zeev Suraski <zeev@php.net> |
Change ALLOC_ZVAL() semantics
/php-src/main/rfc1867.c
|
| 3bf1b04 |
|
24-Dec-1999 |
Andi Gutmans <andi@php.net> |
- Move more stuff to ALLOC_ZVAL(). We need to add those FREE_ZVAL()'s now.
/php-src/main/rfc1867.c
|
| a3c6514 |
|
17-Dec-1999 |
Zeev Suraski <zeev@php.net> |
More php3_ annihilation
/php-src/main/rfc1867.c
|
| 4a60eed |
|
05-Dec-1999 |
Sascha Schumann <sas@php.net> |
Fix some warnings
/php-src/main/rfc1867.c
|
| 5b983c9 |
|
04-Dec-1999 |
Sascha Schumann <sas@php.net> |
Clean up php3.*\.h files. The files itself are renamed, and references in all
.*\.[ch] files were changed. There is a slight chance that my script missed
a few changes, please correct them manually.
/php-src/main/rfc1867.c
|
| b5c3c7b |
|
15-Oct-1999 |
Thies C. Arntzen <thies@php.net> |
files are now resources, file.c is thread-safe, the le_ vars are no longer shared,
but they are accessible thru "php_file_le_socket(), php_file_le_uploads()..."
i also updated the ftp, pdf and file-upload stuff to match the new requirements.
@- Cleaned up File-Module (Thies)
/php-src/main/rfc1867.c
|
| 0cc1641 |
|
12-Oct-1999 |
Thies C. Arntzen <thies@php.net> |
starting to clean-up/new API'ize and resourcify the file-stuff - nothing happened yet - just renaming things around.
/php-src/main/rfc1867.c
|
| 98d95dd |
|
16-Sep-1999 |
Zeev Suraski <zeev@php.net> |
- Added support for unknown POST content types (Zeev)
- Introduce the convert_to_*_ex() API in strlen()
/php-src/main/rfc1867.c
|
| b2c0acb |
|
12-Sep-1999 |
Zeev Suraski <zeev@php.net> |
- Rewrote the GET/POST/Cookie data reader to support multi-dimensional
arrays! (Zeev)
This still needs a lot of more testing, but it seems to work more or less.
/php-src/main/rfc1867.c
|
| 1b6ccfe |
|
11-Sep-1999 |
Zeev Suraski <zeev@php.net> |
Cleanups & optimizations
/php-src/main/rfc1867.c
|
| fb910c6 |
|
11-Sep-1999 |
Zeev Suraski <zeev@php.net> |
Cleanups
/php-src/main/rfc1867.c
|
| 3cb1eb0 |
|
02-Aug-1999 |
Zeev Suraski <zeev@php.net> |
Removed '3' from key functions in PHP (maintained compatibility through
php3_compat.h)
/php-src/main/rfc1867.c
|
| c5724cb |
|
16-Jul-1999 |
Zeev Suraski <zeev@php.net> |
License update
/php-src/main/rfc1867.c
|
| c43c235 |
|
09-Jul-1999 |
Zeev Suraski <zeev@php.net> |
Don't touch refcount and EA directly
/php-src/main/rfc1867.c
|
| 5f62c34 |
|
09-Jul-1999 |
Zeev Suraski <zeev@php.net> |
Step 2:
Rename is_ref to EA
/php-src/main/rfc1867.c
|
| 96bfbc7 |
|
12-Jun-1999 |
Zeev Suraski <zeev@php.net> |
First attempt at moving the old RFC1867 support to the right place
/php-src/main/rfc1867.c
|
| 0eb1498 |
|
28-May-1999 |
Zeev Suraski <zeev@php.net> |
* Get Apache module to compile again with the regex stuff.
* Get Apache to propertly work with POST, and some SAPI fixes
/php-src/main/rfc1867.c
|
| cf58b7e |
|
25-May-1999 |
Zeev Suraski <zeev@php.net> |
Add container for file-upload. It's not quite implemented yet.
/php-src/main/rfc1867.c
|