Actually, I tested again the file upload to project, and I got the following error:

APPLICATION ERROR 401: ERROR: Database query failed.
(database_api.php: line 86)

1064
You have an error in your SQL syntax near 'image/gif', NOW(), '')' at line 4
INSERT INTO mantis_project_file_table (id, project_id, title, description, diskfile, filename, folder, filesize, file_type, date_added, content) VALUES (null, 3, 'GIF Images', 'This is a sample GIF Image', '.\attach\doc-003-gificon.gif', 'doc-003-gificon.gif', '.\attach\', 142, 'image/gif', NOW(), '')

I can't reproduce this at all.

It works fine in PHP 4.3.0 and 4.2.2. Uploading from IE6 on windows. Server is in apache on linux.

and slashes should only be getting stripped if magic_quotes_gpc is turned on (in which case it needs to be stripped)... do you have magic quotes on or off? Presumably I don't see the problem because I'm on linux so I don't get \ in my paths.

Note that I tested both project upload and bug upload.

So this seems to be a Windows specific problem. I will do further testing and post the results here.

From my php.ini:
magic_quotes_gpc = On

This is now fixed in CVS. It will be included in 0.18.0a3.

The bug only applied to installations on Windows servers, hence I did the fix/testing in such environment, I would appreciate testing on other platforms.

I have this problem on 0.18.0a3 - Setting magic_quotes_gpc = Off seems to fix it.

edited on: 03-11-03 03:19

Bug is still present in 0.18.0a4!:

The problem is that the $_FILES['file']['tmp_name'] value is not affected by magic quotes even if they are set to ON. It is set by Php after the file was transfered and MUST NOT be changed. It seems to be some kind of id for the temp-file because the slightest change makes the is_uploaded_file function fail.

I fixed it in my case adding the line:
$f_file['tmp_name'] = $_FILES['file']['tmp_name'];
directly after the line:
$f_file = gpc_get_file( 'file' );
in bug_file_add.php .

Fixed in CVS. Will be included in 0.18.0a5. Sorry for the delay, I had the fix for sometime but forgot to commit it.

The fix is to remove the call for gpc_strip_slahes() from within gpc_get_file().