note 68007 deleted from reserved.variables by nlopess
| From: | nlopess@php.net | Date: | Mon, 10 Jul 2006 07:19:09 +0000 |
| Subject: | note 68007 deleted from reserved.variables by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-114623@lists.php.net to get a copy of this message | ||
Note Submitter: Vecchio
----
Better than:
<?php
$safe = preg_replace('/[^a-z0-9_]/i','',$_GET['unsafe']);
?>
is:
<?php
$safe = basename($_GET['unsafe']);
?>