| Package home | Report new bug | New search | Development Roadmap | Status: Open | Feedback | All | Closed Since Version 1.0.0b4 |
| Request #19365 | check of multiple extensions is not supported | ||
|---|---|---|---|
| Submitted: | 2012-04-02 18:49 UTC | ||
| From: | n8shift | Assigned: | ashnazg |
| Status: | Closed | Package: | HTTP_Upload (version 1.0.0b2) |
| PHP Version: | Irrelevant | OS: | |
| Roadmaps: | (Not assigned) | ||
[2012-04-02 18:49 UTC] n8shift
(Steffen Groß)
Description:
------------
HTTP_Upload_File::_evalValidExtensions() evals the last extension only. This is a problem when running under Apache:
http://httpd.apache.org/docs/current/mod/mod_mime.html#multipleext
If you upload a PHP-file named "foo.php.foo" the check does not match but the file will still execute as PHP.
Comments
[2017-01-12 22:53 UTC] ashnazg
(Chuck Burgess)
-Type: Bug
+Type: Feature/Change Request
-Assigned To:
+Assigned To: ashnazg
[2017-01-17 15:19 UTC] ashnazg
(Chuck Burgess)
-Status: Assigned
+Status: Closed
Implemented on master branch, to be included in next release.