Purpose of Zend\File? about zend-file HOT 2 CLOSED

The component originated in the Zend Framework 1 series, and was ported to a namespaced version with the other components when we originally started working on ZF2.

Additions to zend-filter and zend-validator for validating and handling uploaded files largely removed the need for the Zend\File\Transfer component, but it's kept primarily because some users had ported existing ZF1 code to ZF2. (As noted, it also contains a couple utilities outside the file transfer subcomponent.)

We'll be fixing #19 soon; this was an example of a new feature revealing a lack of tests, leading to broken functionality for some users once merged. (One note: I'd argue with the new feature making it "broken"; you should never rely on the client-supplied filename, and depending on the file having the same name as transmitted by the client is a potential security vector! Since #19 changes the names, I'd argue it's more secure now.)

from zend-file.

Thanks for your reply @weierophinney.

The problems we were having were also related to #15. We use the file name supplied by getFileInfo() only for displaying it to the user, not for the actual filename on disk.

from zend-file.