PHPMaker 2026 (26.13.0), PHP 8.3.
POST a file to /api/upload → ok, I get a filetoken.
POST /api/add/{table} with the filetoken as the upload field value → 500:
[TypeError] CleanUploadTempPath(): Argument #1 ($fld) must be of type DbField, string given,
called in src/HttpUpload.php on line 276
In HttpUpload.php the cleanup is called as CleanUploadTempPath($token, $this->Index), but the function expects a DbField, not the token string. So it throws every time.
It only shows up with Debug enabled: the call is inside a try/catch that rethrows only in debug mode. With Debug off the error is swallowed and the upload seems to work (the file was already moved before the cleanup).
Reproducible on any table with an upload field