[OWASP_PHPSEC] FileLastModified ?

Abbas Naderi abiusx at owasp.org
Tue Jun 25 18:28:19 UTC 2013


Output file, sets the attachment name which the browser uses as default filename for downloading a file.

If it has a space in it, one should put it between quotes, thats what it does.
I'm sure you need to put it in quotes for some other characters as well, go bash your head against the RFC:D
-Abbas
On Tir 4, 1392, at 10:56 PM, rahul chaudhary <rahul300chaudhary400 at gmail.com> wrote:

> There is also this code under Feed function that I do not understand : (i am sorry to ask this random code. Hope you remember this) :P
> 
> if (strpos($OutputFile," ")!==false)
> 			$OutputFile="'{$OutputFile}'";
> 
> 
> On Tue, Jun 25, 2013 at 2:24 PM, rahul chaudhary <rahul300chaudhary400 at gmail.com> wrote:
> Really!! And these functions are under what part of library ?
> 
> 
> On Tue, Jun 25, 2013 at 2:22 PM, Abbas Naderi <abiusx at owasp.org> wrote:
> Ex-actly.
> You might wanna have some script that generates data, instead having something static, or some script that manipulates data (like replace some parts of CSS or JS).
> -A
> On Tir 4, 1392, at 10:51 PM, rahul chaudhary <rahul300chaudhary400 at gmail.com> wrote:
> 
> > I did not know that images stored in DB are treated differently than stored in filesystem. So, feedFile is getting data from filesystem.
> >
> > and feedData is getting data from memory. Correct ?
> 
> 
> 
> 
> -- 
> Regards,
> Rahul Chaudhary
> Ph - 412-519-9634
> 
> 
> 
> -- 
> Regards,
> Rahul Chaudhary
> Ph - 412-519-9634

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp_php_security_project/attachments/20130625/266a9937/attachment.html>


More information about the OWASP_PHP_Security_Project mailing list