Re: /etc/passwd

From: Date: Thu, 10 Jul 2003 11:32:59 +0000
Subject: Re: /etc/passwd
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-154711@lists.php.net to get a copy of this message
My method is: 1. check if id starts with / if(ereg("^\/", $id)) goaway; 2. check if there is .. in it if(ereg("\.\.", $id)) goaway;

« previous php.general (#154711) next »