Doc #66677 [Com]: CURLOPT_SAFE_UPLOAD missing from curl_setopt docs

[email protected] ("kawewong at gmail dot com") Sat, 11 Jun 2022 18:23:13 +0000
Newsgroups php.doc.bugs
Message-ID <[email protected]>
Edit report at https://bugs.php.net/bug.php?id=66677&edit=1

 ID:                 66677
 Comment by:         kawewong at gmail dot com
 Reported by:        steffen dot weber at gmail dot com
 Summary:            CURLOPT_SAFE_UPLOAD missing from curl_setopt docs
 Status:             Closed
 Type:               Documentation Problem
 Package:            cURL related
 Operating System:   Linux
 PHP Version:        5.5.9
 Assigned To:        cmb
 Block user comment: N
 Private report:     N

 New Comment:

There is no document about this in English version.

Found in Spanish ( https://www.php.net/manual/es/function.curl-setopt.php ), Chinese ( https://www.php.net/manual/zh/function.curl-setopt.php ).


Previous Comments:
------------------------------------------------------------------------
[2015-01-08 19:20:20] cmbecker69 at gmx dot de

The documentation has been updated accordingly, so the report can
be closed.

------------------------------------------------------------------------
[2014-02-09 09:58:40] steffen dot weber at gmail dot com

Description:
------------
In PHP 5.5 there is a new cURL option "CURLOPT_SAFE_UPLOAD" (see https://wiki.php.net/rfc/curl-file-upload) that is missing from the documentation of curl_setopt (http://www.php.net/function.curl-setopt).

This option is relevant for security: Unless you enable this option anyone who controls the payload in "curl_setopt($curl, CURLOPT_POSTFIELDS, $payload)" can send arbitrary local files.



------------------------------------------------------------------------



--
Edit this bug report at https://bugs.php.net/bug.php?id=66677&edit=1