Re: Everyone on the road?
| From: | Christian Schneider | Date: | Sat, 24 Jul 2004 16:30:49 +0000 |
| Subject: | Re: Everyone on the road? | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-11545@lists.php.net to get a copy of this message | ||
Stefan Esser wrote:
This is no legal unix path, because index.php is a file and not aOops, missed that part of the path, just looked at the .. :-)
And to understand the security impact: include "./foo/bar/template_".$userinput;... which I'd consider bad practice anyway but that's another story :-) - Chris