Is $_FILES[...]['name'] affected by magic_quotes_gpc?

[Kieran Menor]

Is $_FILES[...]['name'] affected by magic_quotes_gpc?

[Mchl]

gpc stands for GET, POST, COOKIE

http://www.php.net/manual/en/security.magicquotes.what.php

 

Apparently it isn't a very good response.

$_FILES come through POST request, so it's affected.

[PFMaBiSmAd]

Boy is it affected, badly. Under the latest php5.3.x on Windows (this could be a php/Apache under Windows problem, again), magic_quotes_gpc being ON truncates everything up to and including the single quote in an uploaded filename. With magic_quotes_gpc OFF, the same file name is passed correctly. Confirmed using var_dump($_FILES[...]['name']);