function FileFieldWidgetTestCase::testTemporaryFileRemovalExploit

Tests exploiting the temporary file removal of another user using fid.

File

modules/file/tests/file.test, line 612

Class

FileFieldWidgetTestCase

Tests file field widget.

Code

function testTemporaryFileRemovalExploit() {
  // Create a victim user.
  $victim_user = $this->drupalCreateUser();
  // Create an attacker user.
  $attacker_user = $this->drupalCreateUser(array(
    'access content',
    'create page content',
    'edit any page content',
  ));
  // Log in as the attacker user.
  $this->drupalLogin($attacker_user);
  // Perform tests using the newly created users.
  $this->doTestTemporaryFileRemovalExploit($victim_user->uid, $attacker_user->uid);
}