note 80431 deleted from function.preg-replace by danbrown
| From: | danbrown@php.net | Date: | Fri, 28 Nov 2008 19:49:12 +0000 |
| Subject: | note 80431 deleted from function.preg-replace by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-147144@lists.php.net to get a copy of this message | ||
Note Submitter: Bryan Roach
----
Jacob Fogg's clean_filename function is good, but there is a typo. Replace
"\\x00-\\x40" with "\\x00-\\x20" or you will exclude too many characters.
Also keep in mind when checking file names to look for the special directory names ".."
and ".". A user could potentially use those to reach an unexpected directory.