Description: ------------ with newer versions of PHP, we all taught Nullbytes issues were over. but there is still one simple bypass and I still have no clue why there is. Test script: --------------- move_uploaded_file($_FILES['x']['tmp_name'],"/tmp/test.php\x00.jpg") That file will create what you think it shouldn't! Actual result: -------------- I expect the fix of the next version to notice nullbytes and actually not ignore them this time. Thanks!