Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:64606 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 25625 invoked from network); 6 Jan 2013 16:31:07 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 6 Jan 2013 16:31:07 -0000 Authentication-Results: pb1.pair.com smtp.mail=lars@strojny.net; spf=permerror; sender-id=unknown Authentication-Results: pb1.pair.com header.from=lars@strojny.net; sender-id=unknown Received-SPF: error (pb1.pair.com: domain strojny.net from 46.4.40.248 cause and error) X-PHP-List-Original-Sender: lars@strojny.net X-Host-Fingerprint: 46.4.40.248 milch.schokokeks.org Received: from [46.4.40.248] ([46.4.40.248:46246] helo=milch.schokokeks.org) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 5F/62-04877-6C6A9E05 for ; Sun, 06 Jan 2013 11:31:05 -0500 Received: from lstrojnypro3.fritz.box (ppp-46-244-153-186.dynamic.mnet-online.de [::ffff:46.244.153.186]) (AUTH: PLAIN lars@schokokeks.org, TLS: TLSv1/SSLv3,128bits,AES128-SHA) by milch.schokokeks.org with ESMTPSA; Sun, 06 Jan 2013 17:30:59 +0100 id 0000000000000013.0000000050E9A6C3.00000284 Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) In-Reply-To: <50E90DD1.7040204@sugarcrm.com> Date: Sun, 6 Jan 2013 17:30:58 +0100 Cc: PHP Internals Content-Transfer-Encoding: quoted-printable Message-ID: <3549A475-A58F-49EC-A32B-13DA892E3BC1@strojny.net> References: <50E90DD1.7040204@sugarcrm.com> To: Stas Malyshev X-Mailer: Apple Mail (2.1499) Subject: Re: [PHP-DEV] [RFC] Fixing insecure cURL file uploading From: lars@strojny.net (Lars Strojny) Hi Stas, Am 06.01.2013 um 06:38 schrieb Stas Malyshev : [...] > Following the recent discussion on the list, I've drafted an RFC > describing the CurlFile solution for it here: >=20 > https://wiki.php.net/rfc/curl-file-upload >=20 > Please review and comment. If there's a general positive feedback, = I'll > try to implement a patch for it pretty soon. Couldn=92t CurlFile extend SplFileInfo? Otherwise it looks good. cu, Lars=