summaryrefslogtreecommitdiff
path: root/tests/filter
diff options
context:
space:
mode:
authorBen Fuhrmannek2014-07-12 09:25:28 +0200
committerBen Fuhrmannek2014-07-12 09:25:28 +0200
commit6bb8cdbbd56c09a6864b40ce21f9a87abd942305 (patch)
treeae2455c089646cb118ef1efff3af4b677d3b999e /tests/filter
parentdd270c094df080ff8438d29e14ec1bbffe0ca993 (diff)
introduced suhosin.upload.allow_utf8
Diffstat (limited to 'tests/filter')
-rw-r--r--tests/filter/suhosin_upload_disallow_binary_utf8.phpt1
-rw-r--r--tests/filter/suhosin_upload_disallow_binary_utf8fail.phpt45
-rw-r--r--tests/filter/suhosin_upload_remove_binary_utf8.phpt1
-rw-r--r--tests/filter/suhosin_upload_remove_binary_utf8fail.phpt32
4 files changed, 79 insertions, 0 deletions
diff --git a/tests/filter/suhosin_upload_disallow_binary_utf8.phpt b/tests/filter/suhosin_upload_disallow_binary_utf8.phpt
index 4661dc9..557a8d5 100644
--- a/tests/filter/suhosin_upload_disallow_binary_utf8.phpt
+++ b/tests/filter/suhosin_upload_disallow_binary_utf8.phpt
@@ -7,6 +7,7 @@ suhosin.log.stdout=255
7suhosin.log.script=0 7suhosin.log.script=0
8file_uploads=1 8file_uploads=1
9suhosin.upload.disallow_binary=On 9suhosin.upload.disallow_binary=On
10suhosin.upload.allow_utf8=On
10max_file_uploads=40 11max_file_uploads=40
11suhosin.upload.max_uploads=40 12suhosin.upload.max_uploads=40
12--SKIPIF-- 13--SKIPIF--
diff --git a/tests/filter/suhosin_upload_disallow_binary_utf8fail.phpt b/tests/filter/suhosin_upload_disallow_binary_utf8fail.phpt
new file mode 100644
index 0000000..413d25a
--- /dev/null
+++ b/tests/filter/suhosin_upload_disallow_binary_utf8fail.phpt
@@ -0,0 +1,45 @@
1--TEST--
2Testing: suhosin.upload.disallow_binary=On with UTF-8 and allow_utf8=Off
3--INI--
4suhosin.log.syslog=0
5suhosin.log.sapi=0
6suhosin.log.stdout=255
7suhosin.log.script=0
8file_uploads=1
9suhosin.upload.disallow_binary=On
10suhosin.upload.allow_utf8=Off
11max_file_uploads=40
12suhosin.upload.max_uploads=40
13--SKIPIF--
14<?php include('skipif.inc'); ?>
15--COOKIE--
16--GET--
17--POST_RAW--
18Content-Type: multipart/form-data; boundary=bound
19--bound
20Content-Disposition: form-data; name="test"; filename="test"
21
22Spaß am Gerät!
23
24--bound--
25--FILE--
26<?php
27var_dump($_FILES);
28?>
29--EXPECTF--
30array(1) {
31 ["test"]=>
32 array(5) {
33 ["name"]=>
34 string(4) "test"
35 ["type"]=>
36 string(0) ""
37 ["tmp_name"]=>
38 string(0) ""
39 ["error"]=>
40 int(8)
41 ["size"]=>
42 int(0)
43 }
44}
45ALERT - uploaded file contains binary data - file dropped (attacker 'REMOTE_ADDR not set', file '%s')
diff --git a/tests/filter/suhosin_upload_remove_binary_utf8.phpt b/tests/filter/suhosin_upload_remove_binary_utf8.phpt
index 2d10eaa..6fbd240 100644
--- a/tests/filter/suhosin_upload_remove_binary_utf8.phpt
+++ b/tests/filter/suhosin_upload_remove_binary_utf8.phpt
@@ -8,6 +8,7 @@ suhosin.log.script=0
8file_uploads=1 8file_uploads=1
9suhosin.upload.disallow_binary=Off 9suhosin.upload.disallow_binary=Off
10suhosin.upload.remove_binary=On 10suhosin.upload.remove_binary=On
11suhosin.upload.allow_utf8=On
11max_file_uploads=40 12max_file_uploads=40
12suhosin.upload.max_uploads=40 13suhosin.upload.max_uploads=40
13--SKIPIF-- 14--SKIPIF--
diff --git a/tests/filter/suhosin_upload_remove_binary_utf8fail.phpt b/tests/filter/suhosin_upload_remove_binary_utf8fail.phpt
new file mode 100644
index 0000000..5c31115
--- /dev/null
+++ b/tests/filter/suhosin_upload_remove_binary_utf8fail.phpt
@@ -0,0 +1,32 @@
1--TEST--
2Testing: suhosin.upload.remove_binary=On with UTF-8 and allow_utf8=Off
3--INI--
4suhosin.log.syslog=0
5suhosin.log.sapi=0
6suhosin.log.stdout=255
7suhosin.log.script=0
8file_uploads=1
9suhosin.upload.disallow_binary=Off
10suhosin.upload.remove_binary=On
11suhosin.upload.allow_utf8=Off
12max_file_uploads=40
13suhosin.upload.max_uploads=40
14--SKIPIF--
15<?php include('skipif.inc'); ?>
16--COOKIE--
17--GET--
18--POST_RAW--
19Content-Type: multipart/form-data; boundary=bound
20--bound
21Content-Disposition: form-data; name="test"; filename="test"
22
23Spaß am Gerät!
24
25--bound--
26--FILE--
27<?php
28var_dump(file_get_contents($_FILES['test']['tmp_name']));
29?>
30--EXPECTF--
31string(13) "Spa am Gert!
32" \ No newline at end of file