Posted by Alfred Molon on 05/13/07 22:25

In article <1179093340.453709.241100@n59g2000hsh.googlegroups.com>,
matt.farey@gmail.com says...

> alfred, i use php uploads with single quotes just fine, it copes with
> a large range of characters including single quotes.
> you say "the uploads dont work properly" but I am unclear as to what
> that means, where does the process fail? I just think it's a coding/
> config issue, the actual upload functionality will remain completely
> unaffected - if your system is set up properly.

It's a shared host and I can not set the system.

In any case what happens, is that the image will upload and be stored in
the temporary , but then the PHP code will mess up the filename.

For instance, if I upload the file "Al Azhar's mosque Cairo.jpg" (with
the apostrophe), the PHP code will automatically convert the filename to
"Al Azhar\'s mosque Cairo.jpg" (i.e. insert a backslash) and store a
file named "Al Azhar\'s mosque Cairo.jpg" in the temporary directory.

Then for misterious reasons it will convert the filename to "Al Azhar
\\\'s mosque Cairo.jpg" (i.e. insert two more backslashs). This happens
after the filename has been passed as a POST parameter to another
script.

Perhaps I should process the filename with rawurlencode or htmlentities
before passing it as a POST parameter to the other script.
--

Alfred Molon
http://www.molon.de - Photos of Asia, Africa and Europe

[Back to original message]