post-5.5 changes for bug #46439 as described in the RFC

Author: smalyshev

UPGRADING

@@ -40,6 +40,9 @@ PHP X.Y UPGRADE NOTES
 4. Changed Functions
 ========================================
 
+- cURL:
+  CURLOPT_SAFE_UPLOAD is now turned on by default and uploads with @file 
+  do not work unless it is explicitly set to false.
 
 ========================================
 5. New Functions

ext/curl/interface.c

@@ -1822,7 +1822,7 @@ static void alloc_curl_handle(php_curl **ch)
 	zend_llist_init(&(*ch)->to_free->str,   sizeof(char *),            (llist_dtor_func_t) curl_free_string, 0);
 	zend_llist_init(&(*ch)->to_free->slist, sizeof(struct curl_slist), (llist_dtor_func_t) curl_free_slist,  0);
 	zend_llist_init(&(*ch)->to_free->post,  sizeof(struct HttpPost),   (llist_dtor_func_t) curl_free_post,   0);
-	(*ch)->safe_upload = 0; /* for now, for BC reason we allow unsafe API */
+	(*ch)->safe_upload = 1; /* for now, for BC reason we allow unsafe API */
 }
 /* }}} */