Re: PHP File Upload Security Hole - Still No Fix?

> Since you don't seem to believe a single thing I say, just try the bloody > web page before posting again. Note particularly the difference between > what it does with the 3rd and 4th hrefs. > The first time I really got into that with & in url's were in 1 year ago.. and I know exactly how it works and what it does. So I don't need to try it.. and that wasn't what I asked for.. I asked for you answer on WHY someone should do like that and why it would be safer (even though the browser encodes it). I just don't get the idea of how you're thinking in this. That's why I ask.