[wp-trac] [WordPress Trac] #22813: Media Uploader doesn't escape "+" in filenames and doesn't upload file

WordPress Trac noreply at wordpress.org
Fri Dec 7 17:50:07 UTC 2012


#22813: Media Uploader doesn't escape "+" in filenames and doesn't upload file
--------------------------+------------------------------
 Reporter:  devinreams    |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Media         |     Version:  trunk
 Severity:  normal        |  Resolution:
 Keywords:  needs-patch   |
--------------------------+------------------------------

Comment (by jeremyfelt):

 This may also be server related now that I look more. My trunk and 3.4.2
 environments are slightly different.

 `$_GET['file']` on my 3.4.2 Multisite (nginx / PHP 5.3.6 ) returns the
 proper filename, so passes the is_file() check in ms-files.php

 `$_GET['file']` on 3.5-RC4-23121 Multisite ( Apache / PHP 5.3.6 ) returns
 the filename with spaces instead of `+`, which fails the `is_file()`check.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/22813#comment:4>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list