Re: /etc/passwd
| From: | Chris Hayes | Date: | Thu, 10 Jul 2003 11:55:47 +0000 |
| Subject: | Re: /etc/passwd | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-154713@lists.php.net to get a copy of this message | ||
At 13:45 10-7-03, Marek wrote:
Add a check for php files, or any other files you don't want anybody to include: if(ereg('php[0-9]$', $id)) goaway; but what about '?' and '#' additions?$id="however_they_would_find_out/your_path/file.php?extra=x#loc"; ? so maybe if(ereg('\.php', $id)) ?