safe uploading with PHP

From: Date: Wed, 25 Apr 2001 14:25:39 +0000
Subject: safe uploading with PHP
Groups: php.general 
Request: Send a blank email to php-general+get-50304@lists.php.net to get a copy of this message
I am sorry if this is one of the FAQ. Last time I checked (well, a few months ago), PHP has the vulnerability that the user who submitted the form can manipulate the global namespace to let PHP pick up arbitrary file in the system. Can we now do safe file uploading without turning off register_globals? Thanks, Steve

« previous php.general (#50304) next »