note 88011 deleted from function.preg-replace by danbrown
| From: | danbrown@php.net | Date: | Tue, 06 Jan 2009 06:27:11 +0000 |
| Subject: | note 88011 deleted from function.preg-replace by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-148876@lists.php.net to get a copy of this message | ||
Note Submitter: Surfer
----
Cleanning strings of possible attacks:
$s = "./../../../../../.././../../{command}";
$s = "./....//....//....//....//....//....//....//{command}";
$s = "\../../\\\.....\\\///////............/...\/../.././../../{command}";
echo preg_replace ("/\.*[(\/|\\\)]/", "", $s );
output: {command}
enjoys :-)