Re: /etc/passwd
| From: | Marek Kilimajer | Date: | Thu, 10 Jul 2003 11:45:37 +0000 |
| Subject: | Re: /etc/passwd | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-154712@lists.php.net to get a copy of this message | ||
Add a check for php files, or any other files you don't want anybody to include:
if(ereg('php[0-9]$', $id))
goaway;
Fejes Jozsef wrote:
My method is: 1. check if id starts with / if(ereg("^\/", $id)) goaway; 2. check if there is .. in it if(ereg("\.\.", $id)) goaway;