File_transfer "was illegal uploaded, possible attack"

[gi14]

Hi could some one help ?
I'm getting this warning -> Array ( [fileUploadErrorAttack] => The file 'thumbnail' was illegal uploaded, possible attack )
I'm using Zend_File_Transfer_Adapter_Http() class,
Apparently the files does upload, but when I'm applying next code -> (just to make sure it passed the validations)
if (!$upload->isValid('thumbnail')) {
print_r($upload->getMessages());
} <<=== I get the fileUploadErrorAttack.

Why this happen?,
Another thing I want to upload the file, but with a different name -> not the base name of -> $_File['field'][name] .
Can I set this on $upload->receive() method?

How can I retrieve $adapter true values , I what to access $_FILES attributes in order to know, File Size, basename .
Guest a Lot a questions, sorry , but I need a hand right here.

[thomas]

First...

This code snippet does not show your problem...

Do you use the form element and also the transfer adapter ?
Because this would not work, as two adapters try to access the files which causes a attacker violation. The file element uses it's own adapter.

Second... why don't you use the rename filter to rename the file ??

Third... what should a $adapter true value do or be ?

Forth... why don't you use the getFileInfo() method to access the internal file informations ?

Fifth... why havn't you read the manual ? Most is described there.

[gi14]

Hi Thomas I was following you since my beginning of implementing this class on my work, sorry about some misunderstanding.
I'm not using the form element and transfer adapter.

- I'm using a simple html common Form which does the upload, and the handling of the uploaded files with Zend_File_Transfer.
Chapter 17. Zend_File, so I'm reading.

About "$adapter" I meant the transfer adapter it self , get the values of the file. and for some reason I can't access getfileInfo to do so, it appears that this method its not implemented on class Transfer. which its really weird.
Apparently I’m using ZendFramework 1.6.1

I did use Rename filter, but again something does not working right .
sorry for the inconvenience.

[thomas]

When you are following me, you should already know that I am always speaking of the SVN trunk.

How should I know problems when people don't say which version they are using ?

You know that this component is under permanent development and things change almost each day. So update to trunk and let's speak again.
Also give reproducable code and not a one liner which does not show the problem.

Probably your problem is no problem at all.

[dewetd]

Hi

I appreciate your effort and dedication. From what I can gather you are doing a lot of work on this.
BUT...
unfortunately you can write all the code you want, if there are not practical logical examples, relating to SPECIFIC versions, it is not worth much.

Using this component is a pain.
Having to upgrade to 1.6.2 to allow for multiple file uploads is unecesary. I have to ask myself how this stuff gets released if it was never properly tested?
Also, after upgrading, I find out that there now are new bugs which should have been caught in testing. In fact, these bugs are so obvious I would guess it will affect 90% of current implementations within first try.

I come from a ERP systems consulting background and this kind of amaturism would not have flied.

Lastly, when people ask questions regarding this very buggy, poorly documented, rather confusing mixture of versions, classes etc, the designer/owner often is cheeky with them- choosing not to answer the question, but rather to point out their incompetence in reading the manual.

Well, the documentation being bad is the reason for this.
I have spent more time on this than desiging the whole ER for a new ERP app.

For uploading files?!
Crazy.

Please stop replying so snottily. Post more example code on the web. Proactive instead of reactive. If you do it once, you save yourself weeks of tedious replies to simple problems.
Test better. The errors appearing makes me wonder how much testing has been done.

[thomas]

Do you think that you will get any help with such a reply ?
Not from me...

I really invest much of my sparetime in ZF and I get not payed anything.

I was forced to release a component which was far away from being finished. Do you believe that an unfinished and new component is error free ? Me not... but with every issue it get's harder and completer.

If you would be involved in ZF you would see what I am speaking of.

So as conclusio, I will stop to reply within this thread, as my help is not appreciated anymore.

And sorry... but I am no native english speaker... all days someone mocks about lacking manual, quick installation guide or demo examples but I can only do what I do... as no one wants to help you will have to work with what I offer in the medias where I am working with... blog, IRC, manual, webinars and forum... this must be enough... when not, stop crying about it and help us.