Red Hat Bugzilla – Bug 27623
Bad: php-4.0.4pl1-3 doesn't handle correctly forms with enctype=multipart/form-data
Last modified: 2007-04-18 12:31:28 EDT
From Bugzilla Helper:
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)
Bad: The php-4.0.4pl1-quotes.patch patch applied to the latest RPM (php-
4.0.4pl1-3.i386.rpm) results in incorrect form processing.
When a form with enctype=multipart/form-data is "posted", all of that form
variables are prepended with an extra \r. This is a problem not only with
text type field, but also to the field with file to be uploaded.
Steps to Reproduce:
1. install or update php to php-4.0.4pl1-3
2. create a simple script with some text fields and an "upload file" option
3. enter some data on those fields, POST the form and check their values
Actual Results: I got an extra \r prepended to text fields and Content-
Type = null with the MIME type for the file field.
Expected Results: Correct file recognition and text fields with the
values the user entered, without the extra \r's
I am using the latest RPMs from official RedHat's FTP (updates.redhat.com)
Created attachment 10023 [details]
Script demonstrating incorrect operation
Created attachment 12804 [details]
Script which triggers the bug
Me too, the latest redhat patch is broken and should be dropped.
Just tried fixing this with PHP 4.0.5 and the problem is still there. PHP was
compiled with the following ./configure:
./configure --prefix=/usr --with-config-file-path=/etc --disable-debug --enable-
pic --enable-shared --enable-inline-optimization --with-apxs=/usr/sbin/apxs --
with-exec-dir=/usr/bin --with-regex=system --enable-debugger --enable-magic-
quotes --enable-safe-mode --enable-sockets --enable-track-vars --with-