search

CreativeDream / php-uploader

PHP File Uploader is an easy to use, hi-performance File Upload Script which allows you to upload files to webserver
MIT License
94 stars 51 forks source link

[Question] Extra validation required when extenstion set to NULL #28

Open lenamtl opened 2 years ago

lenamtl commented 2 years ago

Hi,

I found a couple issues with file name, also when extension is set to NULL

'extensions' => null, // null allow any type of file

The code allow file name like this

Case 1: myfilehasnoextension ***Not so sure how to handle this case has when downloading browser add xml extension if any...

Case 2: myfile.txt space and / characters after the dot I remove space and replacing special characters during the validation

Case 3: myfile'have_apostrophe.txt I'm replacing apostrophe during the validation

I think even if the extension is set to NULL, it should maybe check if there is a dot and some letter after the dot...