note 60763 deleted from security.filesystem by tularis
| From: | tularis@php.net | Date: | Mon, 16 Jan 2006 07:53:33 +0000 |
| Subject: | note 60763 deleted from security.filesystem by tularis | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-101903@lists.php.net to get a copy of this message | ||
Note Submitter: adar.que(at)gmail.com
Reason: useless
----
<?php
$PATH_INFO = $_SERVER['PATH_INFO'];
$base_path = '.';
$path = "{$base_path}{$PATH_INFO}";
$base_dir = addslashes('C:\myWeb');
if ( !preg_match("/^$base_dir/i", realpath($path)) ) {
exit();
}
?>