The null byte upload attack on newer browsers?

Anyway to do it when file uploading? Opera just says '[x]%00[y] not found'

I have tried it with Firefox, and it looks like that the filename parameter is not encoded. Edit: Also tried it with a real null-byte, but php used only what's before the null-byte.

Is this a test preformed by you on your own code? If so you reckon that the newest php amendment has automatically fixed this with the inclusion of sanitize() etc.?

Out of interest have you tried \x00 instead?

If you think the browser is screwing with your input, bypass it by doing a direct(er) request using sockets/some API in the language of your choice.

spyware wrote: If you think the browser is screwing with your input, bypass it by doing a direct(er) request using sockets/some API in the language of your choice.

Live Http Headers will do.