File upload
| From: | Boget, Chris | Date: | Tue, 01 May 2001 20:16:04 +0000 |
| Subject: | File upload | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-51006@lists.php.net to get a copy of this message | ||
From the manual:
"Handling file uploads Uploading multiple files
Common Pitfalls
Not validating which file you operate on may mean that users
can access sensitive information in other directories. "
What is meant by the above? How would you "validate" that
you weren't operating on the wrong file? As far as I know,
PHP puts the file in whatever directory you specify and that
is where you would access the file... how could someone make
it so they access information elsewhere?
Chris