Re: Re: [Phpwebsite-developers] Problem uploading documents in 0.10.1

[Stephen F. <sbp...@18...>]

Actually, it seems more complex than that.  The good news is that the 
suggestion does fix the problem:

 > Test it by switching $parse_all_files = TRUE; in
 > conf/security_config.php to false.

However, it does not appear to be all PDFs.  I've devoted a lot of MIPS 
to this problem over the last week without solving it until I read 
Shaun's post (thanks, Shaun!).  The issue also appears related in some 
way to the size of the PDF files.  I have succeeded with every PDF under 
about a half-meg that I've tried, but failed with PDFs of a meg or 
more.  Playing with upload_max_filesize doesn't seem to have any impact 
on the problem.  Toggling $parse_all_files to FALSE resolves the issue 
but I don't understand why.

And oddly enough, the problem first showed up on a church bulletin PDF 
for us as well.  However, since then I've replicated it in a wide 
variety of (mostly technical) PDFs.

Stephen

---
Date: Tue, 12 Apr 2005 18:53:51 -0400 (EDT)
From: Tony Miller <to...@ht... 
<http://www.180hosting.com/egroupware/email/compose.php?folder=INBOX&to=to...@ht...>>
To: php...@li... 
<http://www.180hosting.com/egroupware/email/compose.php?folder=INBOX&to=php...@li...>
Subject: Re: [Phpwebsite-developers] Problem uploading documents in 0.10.1
Reply-To: php...@li... 
<http://www.180hosting.com/egroupware/email/compose.php?folder=INBOX&to=php...@li...>

On Tue, 12 Apr 2005, Shaun Murray wrote:

 >
 > On 12 Apr 2005, at 05:21, Tony Miller wrote:
 >
 > > Ever since I have upgraded to 0.10.1, I have been unable to upload
 > > documents. I will get an upload has failed message. I thought it was
 > > a
 > > permissions problem, but I have 777 from the branch on down.
 > >
 > > Has anyone else had this sort of problem and is there any idea how to
 > > fix
 >
 > This might be the security fix interfering with the upload. It scans a
 > file for a particular string, which is possibly in the file you're
 > uploading.
 >
 > Test it by switching $parse_all_files = TRUE; in
 > conf/security_config.php to false.
 >
 > I wonder if it might be an idea to switch off the security fix if the
 > person uploading is a deity or even an admin?

Yup, that's it. And it had stopped every single .PDF that I tried to
upload. I can't figure out how church bulletins could be malicious.
Could it be that the security algorithm needs to be tweaked?

Thanks for the help Shaun. :)

-Tony