Re: "Sanitize" paths

From: Date: Sun, 02 Oct 2005 15:26:16 +0000
Subject: Re: "Sanitize" paths
References: 1 2 3  Groups: php.general 
Request: Send a blank email to php-general+get-223529@lists.php.net to get a copy of this message
realpath() is your friend...
That has been my first impression too, but...
realpath() expands all symbolic links
I am actually using symlinks :) I trust the files on my server so "local redirects" via symlinks are no problem, the user submitted data is.
Then realpath() your doc root as well and then you'll be comparing apples to apples...

« previous php.general (#223529) next »