Re: safe uploading with PHP
| From: | Rasmus Lerdorf | Date: | Wed, 25 Apr 2001 16:29:21 +0000 |
| Subject: | Re: safe uploading with PHP | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-50319@lists.php.net to get a copy of this message | ||
> Last time I checked (well, a few months ago), PHP has the
> vulnerability that the user who submitted the form can
> manipulate the global namespace to let PHP pick up arbitrary
> file in the system. Can we now do safe file uploading without
> turning off register_globals?
Yes, this was fixed a while ago. In PHP 4.0.3 I believe.
-Rasmus