using $_FILES

If I create an input type=files in the html form
Then in the target php script use the $_FILES array to get the info
All works well – uploads work fine.

But . . . if the file name contains a single quote mark, the name from $_FILES is not correct. The resulting $_FILES[‘file’][‘name’] gives the name from the next character after the single quote to the end (like a reverse truncation). Only the single quote casues this (that I have found). The upload still works, but with a wierd file name result.

Example test code to demonstrate the problem:

html upload page (test.htm):

[code]<form action=”test.php” method=”post” enctype=”multipart/form-data”>
File: <input type=file name=”file” size=30><br>
<input type=submit name=”submit” value=”Upload File”></form>[/code]

php processing page (test.php):

[code=php]<?php
print_r($_FILES);
?>[/code]

Then try and use any file name with a single quote in it.

Running PHP Version 4.3.10 with the error
Works fine when using PHP Version 4.3.4
Enhancement or bug?

Also in #PHP _↴