note 88877 added to function.fread

James, You wouldn't necessarily have to have it built into the webserver. I run a site that used a loop/fread() solution. However, I was serving large files(over 7GB at the largest) and ran into scripting timeout issues. I ended up dynamically creating symlinks, to my files and redirecting to those. It's still vulnerable like you say, but the symlinks only last a few days. So the vulnerability window is short. ---- Server IP: 208.69.120.35 Probable Submitter: 137.229.21.115 ---- Manual Page -- http://www.php.net/manual/en/function.fread.php Edit -- https://master.php.net/note/edit/88877 Del: integrated -- https://master.php.net/note/delete/88877/integrated Del: useless -- https://master.php.net/note/delete/88877/useless Del: bad code -- https://master.php.net/note/delete/88877/bad+code Del: spam -- https://master.php.net/note/delete/88877/spam Del: non-english -- https://master.php.net/note/delete/88877/non-english Del: in docs -- https://master.php.net/note/delete/88877/in+docs Del: other reasons-- https://master.php.net/note/delete/88877 Reject -- https://master.php.net/note/reject/88877 Search -- https://master.php.net/manage/user-notes.php