note 78812 added to function.include

Hello, How can I persuade you to add another warning at a very prominent place (preferrably in the first screen content)? The text would be something like: "Never use include() or require() with a non-sanitized variable. In most cases adding a './' concatenated before the variable name will suffice" You wouldn't imagine the number of webspaces that are hacked with remote file inclusion. HTH, Torge ---- Server IP: 212.124.37.9 Probable Submitter: 212.227.35.88 ---- Manual Page -- http://www.php.net/manual/en/function.include.php Edit -- https://master.php.net/note/edit/78812 Del: integrated -- https://master.php.net/note/delete/78812/integrated Del: useless -- https://master.php.net/note/delete/78812/useless Del: bad code -- https://master.php.net/note/delete/78812/bad+code Del: spam -- https://master.php.net/note/delete/78812/spam Del: non-english -- https://master.php.net/note/delete/78812/non-english Del: in docs -- https://master.php.net/note/delete/78812/in+docs Del: other reasons-- https://master.php.net/note/delete/78812 Reject -- https://master.php.net/note/reject/78812 Search -- https://master.php.net/manage/user-notes.php