note 67604 deleted from function.is-uploaded-file by bjori
| From: | bjori@php.net | Date: | Fri, 09 Jun 2006 00:00:41 +0000 |
| Subject: | note 67604 deleted from function.is-uploaded-file by bjori | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-113973@lists.php.net to get a copy of this message | ||
Note Submitter: hypah2 at hotmail dot com
Reason: in docs
----
If you have register_globals turned off, then $_FILES['filedata']['tmp_name']
cannot be forged by a user! It cannot be made to point to /etc/passwd, nor anything else - your
script is safe without this function.