Re: [RFC] Fixing insecure cURL file uploading

From: Date: Mon, 07 Jan 2013 04:40:12 +0000
Subject: Re: [RFC] Fixing insecure cURL file uploading
References: 1  Groups: php.internals 
Request: Send a blank email to [email protected] to get a copy of this message
Hi Stas,

Everything looks good to me :) Great job.

About your optional section :

I like the procedural function that you proposed so that you don't
have to use an object if you don't want to.

cURL allow you to upload file from string buffer with CURLFORM_BUFFER
and we should be able to do all the streams stuff with CURLFORM_STREAM
and by modifying our CURLOPT_READFUNCTION.

Pierrick


On 6 January 2013 00:38, Stas Malyshev <[email protected]> wrote:
> Hi!
>
> Following the recent discussion on the list, I've drafted an RFC
> describing the CurlFile solution for it here:
>
> https://wiki.php.net/rfc/curl-file-upload
>
> Please review and comment. If there's a general positive feedback, I'll
> try to implement a patch for it pretty soon.
> --
> Stanislav Malyshev, Software Architect
> SugarCRM: http://www.sugarcrm.com/
> (408)454-6900 ext. 227
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>


Thread (14 messages)

« previous php.internals (#64621) next »