Conflicting Users and permissions with file uploads

[cmb]

Hi Frank,

I had to write a small php-program

Hmm, well, so we probably shouldn't add the chmod(), as writing small PHP programs is always a good exercise!

Thanks for the confirmation! I'll put it on the roadmap.

Christoph

[cmb]

I've just added this to the TRUNK (r211). But I've noticed, that a notice is thrown after deleting a file, which is related to the fact, that the filename is given as "file" parameter in the POST request. But file is one of the "reserved" GP parameters (cmsimple/cms.php line 179), and so $f will be set to 'file' (cmsimple/adm.php line 70). That's probably harmless, but it might be cleaner to change the parameter to "filename" or so.

[svasti]

but it might be cleaner to change the parameter to "filename" or so.

+1
Little question, what do you mean by "GP" in GP parameters? Great Primadonna? Grand Program? Generated Prrrr?

[cmb]

Little question, what do you mean by "GP" in GP parameters?

GET/POST, as this is what initvar() actually does: checking for $_GET and $_POST (in contrast $_REQUEST also holds the cookies, and the three parameter types are sometimes abbreviated as GPC).

[svasti]

aahh, thx.

[cmb]

Hi svasti,

while trying to add the chmod() for XH 1.4.5, I've noticed that it's already there since XH 1.2. The filemanager of FCKEditor does a chmod() also (permissions are configurable, defaulting to 0777).

I've had this problem on one server where I couldn't download image files uploaded by the customer and couldn't even change the permissions with filezilla, because the ftp wasn't the owner of the files.

Under which version of CMSimple was that?

Christoph