Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:30248 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 6082 invoked by uid 1010); 19 Jun 2007 10:19:55 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 6066 invoked from network); 19 Jun 2007 10:19:55 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 19 Jun 2007 10:19:55 -0000 Authentication-Results: pb1.pair.com header.from=tstarling@wikimedia.org; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=tstarling@wikimedia.org; spf=permerror; sender-id=unknown Received-SPF: error (pb1.pair.com: domain wikimedia.org from 66.111.4.25 cause and error) X-PHP-List-Original-Sender: tstarling@wikimedia.org X-Host-Fingerprint: 66.111.4.25 out1.smtp.messagingengine.com Received: from [66.111.4.25] ([66.111.4.25:48175] helo=out1.smtp.messagingengine.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 13/81-24535-8CDA7764 for ; Tue, 19 Jun 2007 06:19:54 -0400 Received: from compute2.internal (compute2.internal [10.202.2.42]) by out1.messagingengine.com (Postfix) with ESMTP id 7D4461024 for ; Tue, 19 Jun 2007 06:19:50 -0400 (EDT) Received: from heartbeat2.messagingengine.com ([10.202.2.161]) by compute2.internal (MEProxy); Tue, 19 Jun 2007 06:19:50 -0400 X-Sasl-enc: mE37lrFlg+kN6q+bvtwg+V8i5VqpuM5z/UQkPzOI9MkR 1182248390 Received: from [192.168.0.151] (88-108-191-26.dynamic.dsl.as9105.com [88.108.191.26]) by mail.messagingengine.com (Postfix) with ESMTP id 2BD41142A8 for ; Tue, 19 Jun 2007 06:19:50 -0400 (EDT) Message-ID: <4677ADB5.6060308@wikimedia.org> Date: Tue, 19 Jun 2007 11:19:33 +0100 User-Agent: Thunderbird 1.5.0.12 (Windows/20070509) MIME-Version: 1.0 To: internals@lists.php.net X-Enigmail-Version: 0.94.1.2 OpenPGP: id=BF976370 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Subject: Bug 38245: magic_quotes_gpc and $_FILES From: tstarling@wikimedia.org (Tim Starling) Can someone explain the closing comment on this bug report to me? http://bugs.php.net/bug.php?id=38245 Surely in a addslashes-escaped string, \\ is the Windows directory separator, not \. The bug clearly describes irreversible corruption of upload filenames by PHP. I just had a report of it in a MediaWiki context, and I can't believe that it wouldn't be considered a bug. -- Tim Starling http://www.google.com/search?q=%22tim+starling%22