Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
--TEST-- file upload greater than 2G --SKIPIF-- <?php include "skipif.inc"; if (PHP_INT_S..
Decoded Output download
--TEST--
file upload greater than 2G
--SKIPIF--
<?php
include "skipif.inc";
if (PHP_INT_SIZE < 8) {
die("skip need PHP_INT_SIZE>=8");
}
if (disk_free_space(sys_get_temp_dir()) < 2300000000) {
die("skip need more than 2.15G of free disk space for the uploaded file");
}
if (!file_exists('/proc/meminfo')) {
die('skip Cannot check free RAM from /proc/meminfo on this platform');
}
$free_ram = 0;
if ($f = fopen("/proc/meminfo","r")) {
while (!feof($f)) {
if (preg_match('/MemFree[^\d]*(\d+)/i', fgets($f), $m)) {
$free_ram = max($free_ram, $m[1]/1024/1024);
if ($free_ram > 3) {
$enough_free_ram = true;
}
}
}
}
if (empty($enough_free_ram)) {
die(sprintf("skip need +3G free RAM, but only %01.2f available", $free_ram));
}
if (getenv('TRAVIS')) {
die("skip Fails intermittently on travis");
}
if (getenv('SKIP_PERF_SENSITIVE')) {
die("skip Test may be very slow if PHP is instrumented");
}
?>
--FILE--
<?php
echo "Test
";
include "php_cli_server.inc";
php_cli_server_start("var_dump(\$_FILES);", null,
["-d", "post_max_size=3G", "-d", "upload_max_filesize=3G"]);
$length = 2150000000;
$output = "";
$host = PHP_CLI_SERVER_HOSTNAME;
$fp = php_cli_server_connect();
$prev = "----123
Content-Type: text/plain; charset=UTF-8
Content-Disposition: form-data; name=\"file1\"; filename=\"file1.txt\"
";
$post = "
----123--
";
$total = $length + strlen($prev) + strlen($post);
fwrite($fp, <<<EOF
POST /index.php HTTP/1.1
Host: {$host}
Content-Type: multipart/form-data; boundary=--123
Content-Length: {$total}
{$prev}
EOF
) or die("write prev failed");
$data = str_repeat("0123456789", 10000);
for ($i = 0; $i < $length; $i += 10000 * 10) {
fwrite($fp, $data) or die("write failed @ ($i)");
}
fwrite($fp, $post) or die("write post failed");
while (!feof($fp)) {
$output .= fgets($fp);
}
echo $output;
fclose($fp);
?>
Done
--EXPECTF--
Test
HTTP/1.1 200 OK
Host: %s
Date: %s
Connection: close
X-Powered-By: PHP/%s
Content-type: text/html; charset=UTF-8
array(1) {
["file1"]=>
array(6) {
["name"]=>
string(9) "file1.txt"
["full_path"]=>
string(9) "file1.txt"
["type"]=>
string(10) "text/plain"
["tmp_name"]=>
string(%d) "%s"
["error"]=>
int(0)
["size"]=>
int(2150000000)
}
}
Done
Did this file decode correctly?
Original Code
--TEST--
file upload greater than 2G
--SKIPIF--
<?php
include "skipif.inc";
if (PHP_INT_SIZE < 8) {
die("skip need PHP_INT_SIZE>=8");
}
if (disk_free_space(sys_get_temp_dir()) < 2300000000) {
die("skip need more than 2.15G of free disk space for the uploaded file");
}
if (!file_exists('/proc/meminfo')) {
die('skip Cannot check free RAM from /proc/meminfo on this platform');
}
$free_ram = 0;
if ($f = fopen("/proc/meminfo","r")) {
while (!feof($f)) {
if (preg_match('/MemFree[^\d]*(\d+)/i', fgets($f), $m)) {
$free_ram = max($free_ram, $m[1]/1024/1024);
if ($free_ram > 3) {
$enough_free_ram = true;
}
}
}
}
if (empty($enough_free_ram)) {
die(sprintf("skip need +3G free RAM, but only %01.2f available", $free_ram));
}
if (getenv('TRAVIS')) {
die("skip Fails intermittently on travis");
}
if (getenv('SKIP_PERF_SENSITIVE')) {
die("skip Test may be very slow if PHP is instrumented");
}
?>
--FILE--
<?php
echo "Test\n";
include "php_cli_server.inc";
php_cli_server_start("var_dump(\$_FILES);", null,
["-d", "post_max_size=3G", "-d", "upload_max_filesize=3G"]);
$length = 2150000000;
$output = "";
$host = PHP_CLI_SERVER_HOSTNAME;
$fp = php_cli_server_connect();
$prev = "----123
Content-Type: text/plain; charset=UTF-8
Content-Disposition: form-data; name=\"file1\"; filename=\"file1.txt\"\n\n";
$post = "\n----123--\n";
$total = $length + strlen($prev) + strlen($post);
fwrite($fp, <<<EOF
POST /index.php HTTP/1.1
Host: {$host}
Content-Type: multipart/form-data; boundary=--123
Content-Length: {$total}
{$prev}
EOF
) or die("write prev failed");
$data = str_repeat("0123456789", 10000);
for ($i = 0; $i < $length; $i += 10000 * 10) {
fwrite($fp, $data) or die("write failed @ ($i)");
}
fwrite($fp, $post) or die("write post failed");
while (!feof($fp)) {
$output .= fgets($fp);
}
echo $output;
fclose($fp);
?>
Done
--EXPECTF--
Test
HTTP/1.1 200 OK
Host: %s
Date: %s
Connection: close
X-Powered-By: PHP/%s
Content-type: text/html; charset=UTF-8
array(1) {
["file1"]=>
array(6) {
["name"]=>
string(9) "file1.txt"
["full_path"]=>
string(9) "file1.txt"
["type"]=>
string(10) "text/plain"
["tmp_name"]=>
string(%d) "%s"
["error"]=>
int(0)
["size"]=>
int(2150000000)
}
}
Done
Function Calls
None |
Stats
MD5 | 430c76dfee4bcb5b6afe90ff1df54cf5 |
Eval Count | 0 |
Decode Time | 73 ms |