Sophie

Sophie

distrib > Mageia > 4 > x86_64 > by-pkgid > 852b555ab4ac599f72ecd55e8813096c > files > 123

php-suhosin-0.9.35-1.mga4.x86_64.rpm

--TEST--
Testing include file from $_FILES
--SKIPIF--
<?php include "../skipifcli.inc"; ?>
--INI--
suhosin.log.syslog=0
suhosin.log.sapi=0
suhosin.log.stdout=255
suhosin.log.script=0
suhosin.log.phpscript=0
suhosin.executor.include.whitelist=
suhosin.executor.include.blacklist=
--POST_RAW--
Content-Type: multipart/form-data; boundary=---------------------------20896060251896012921717172737
-----------------------------20896060251896012921717172737
Content-Disposition: form-data; name="f1"; filename="filename2"

<?php echo "NO_GOOD/n";
-----------------------------20896060251896012921717172737--
--FILE--
<?php
include $_FILES['f1']['tmp_name'];
?>
--EXPECTF--
ALERT - Include filename is an uploaded file (attacker 'REMOTE_ADDR not set', file '%s', line 2)