Re: Re: [Phpwebsite-developers] Problem uploading documents in 0.10.1

[Matthew M. <ma...@tu...>]

If you want to send me two public pdfs (one that passes and one that
does not) I will perform some testing.

Matt

On Wed, 2005-04-13 at 13:34 -0400, Stephen Fierbaugh wrote:
> 
> Actually, it seems more complex than that.  The good news is that the
> suggestion does fix the problem:
> 
> > Test it by switching $parse_all_files = TRUE; in 
> > conf/security_config.php to false.
> 
> However, it does not appear to be all PDFs.  I've devoted a lot of
> MIPS to this problem over the last week without solving it until I
> read Shaun's post (thanks, Shaun!).  The issue also appears related in
> some way to the size of the PDF files.  I have succeeded with every
> PDF under about a half-meg that I've tried, but failed with PDFs of a
> meg or more.  Playing with upload_max_filesize doesn't seem to have
> any impact on the problem.  Toggling $parse_all_files to FALSE
> resolves the issue but I don't understand why.
> 
> And oddly enough, the problem first showed up on a church bulletin PDF
> for us as well.  However, since then I've replicated it in a wide
> variety of (mostly technical) PDFs.
> 
> Stephen
> 
> ---
> Date: Tue, 12 Apr 2005 18:53:51 -0400 (EDT)
> From: Tony Miller <to...@ht...>
> To: php...@li...
> Subject: Re: [Phpwebsite-developers] Problem uploading documents in
> 0.10.1
> Reply-To: php...@li...
> 
> On Tue, 12 Apr 2005, Shaun Murray wrote:
> 
> > 
> > On 12 Apr 2005, at 05:21, Tony Miller wrote:
> > 
> > > Ever since I have upgraded to 0.10.1, I have been unable to upload
> > > documents. I will get an upload has failed message. I thought it
> was 
> > > a
> > > permissions problem, but I have 777 from the branch on down.
> > >
> > > Has anyone else had this sort of problem and is there any idea how
> to 
> > > fix
> > 
> > This might be the security fix interfering with the upload. It scans
> a 
> > file for a particular string, which is possibly in the file you're 
> > uploading.
> > 
> > Test it by switching $parse_all_files = TRUE; in 
> > conf/security_config.php to false.
> > 
> > I wonder if it might be an idea to switch off the security fix if
> the 
> > person uploading is a deity or even an admin?
> 
> Yup, that's it. And it had stopped every single .PDF that I tried to 
> upload. I can't figure out how church bulletins could be malicious. 
> Could it be that the security algorithm needs to be tweaked?
> 
> Thanks for the help Shaun. :)
> 
> -Tony
> 
-- 
Matthew McNaney
Electronic Student Services
Appalachian State University
http://phpwebsite.appstate.edu