in reply to Re: Perl/CGI Uploading file to the server using a upload hook is failing intermittently
in thread Perl/CGI Uploading file to the server using a upload hook is failing intermittently
If you want a module that is similar (but somewhat more lenient) to WashFilename, see Text::CleanFragment. It munges filenames to match
/^[-._A-Za-z0-9]*$/
or, to be more exact
/^([A-Za-z0-9]([-._A-Za-z0-9]*[A-Za-z0-9])?$/
Instead of removing umlauts etc., it cleans them up by unaccenting or transliterating them.
Personally, I don't like to create files on a system with a filename supplied by the user, so I mostly create filenames using the SHA-256 (or whatever) and have a database mapping the file id to the user-specified filename. This helps avoiding all those pesky injections.
|
|---|