Page 1 of 1

Strip Slashes $_FILES

Posted: Sat Sep 09, 2006 11:48 am
by nickvd
Is running $_FILES thru stripslashes (or other input filtering scheme)?

I'm trying to muck around with PhotoStack and it's running $_FILES thru it, which is removing the path seperators in ['tmp_name']...

Would it be safe for me to just comment out the $_FILES processing? or would I be leaving the script open, and therefore be better off checking for $_FILES, or even just the 'tmp_name' key and skipping the stripslashes.

Posted: Sat Sep 09, 2006 11:51 am
by jayshields
Why would you ever need to strip the slashes from anything in the $_FILES array?

I would just comment out the line like you said.

Posted: Sat Sep 09, 2006 11:54 am
by nickvd
That's what I thought, and did comment it out (just to make sure i located the problem).. I'll leave it as is... thanks for the infoz!