snuffleupagus/src/tests/upload_validation_real.phpt, branch optim85 Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! http://git.dustri.org/snuffleupagus/atom?h=optim85 2019-01-14T19:29:25Z Reorganize the testsuite 2019-01-14T19:29:25Z jvoisin 2019-01-14T19:29:25Z urn:sha1:e79f7e3bd992c7f0915ef9afe7afb6d79740527a Splitting the testsuite in several components makes it easier to manage and comprehend. This was also needed some some tests aren't passing on Alpine Linux, but we still want to run as many of them as we can on this platform. Use php full path 2018-09-01T12:02:51Z Remi Collet 2018-09-01T12:02:51Z urn:sha1:9f4b297a7a4a3b0be34a9fbe9ffe9273cfda40f7 Use the PHP_BINARY constant instead of "php". Use php's logging functions 2018-08-28T12:24:29Z xXx-caillou-xXx 2018-08-28T12:24:29Z urn:sha1:aa5d6895d0ac8c6ea050a8ea55e2f8a39ddfe365 This commit replace our usage of `php_log_err` with `zend_error`. This should allow administrators to display errors in the webpage, should they want to; and to properly manipulate the verbosity's level. This should close #217 Skip VLD for php7.3, as VLD is not compatible yet. 2018-07-13T15:08:20Z xXx-caillou-xXx 2018-07-13T15:08:20Z urn:sha1:1d8294750268d6d89b690312bc153c359abe6f6c Don't run some tests on `-dev` php versions 2018-05-16T09:58:53Z jvoisin 2018-05-16T09:58:53Z urn:sha1:9eebe8c67e03e3041d454ea28e93996f7a67740b Improve the testsuite's robustness against php7.2 2018-05-16T09:32:17Z jvoisin 2018-05-16T09:32:17Z urn:sha1:926dbb67ad29fe452987242bc6fc466d3c28fced php-nightly is now allowed to fail 2018-02-22T15:35:39Z jvoisin 2018-02-22T15:35:39Z urn:sha1:884bbbdf5f0916a840bb9fc8f40c14163d58fad8 PHP is breaking too many things on nightly, we'll only support releases from now on. This should also make our vld-based file-upload checker more resilient: no more random warnings on stderr. Provide a script for upload validation 2018-02-12T12:55:33Z jvoisin 2018-02-12T12:55:33Z urn:sha1:696ebc4ae68f4c7c2b803c917de365b98621b3a8 The Python script is using vld (https://derickrethans.nl/projects.html#vld) to check for malicious opcodes.