note 73455 deleted from function.include by danbrown
| From: | danbrown@php.net | Date: | Mon, 18 May 2009 01:00:16 +0000 |
| Subject: | note 73455 deleted from function.include by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-155465@lists.php.net to get a copy of this message | ||
Note Submitter: Khaos
----
This might help a bit for security (no guarantees).
Instead of
include $page;
put
include str_replace('../', '', './' . $page);