note 104346 added to security.filesystem

The Russian with the first comment has the best solution in my opinion. If the script reads all the files to which the user ought to have access, then compares them to the user specified filename, which must match only one, where is the vulnerability? ---- Server IP: 69.147.83.197 Probable Submitter: 69.204.25.108 ---- Manual Page -- http://www.php.net/manual/en/security.filesystem.php Edit -- https://master.php.net/note/edit/104346 Del: integrated -- https://master.php.net/note/delete/104346/integrated Del: useless -- https://master.php.net/note/delete/104346/useless Del: bad code -- https://master.php.net/note/delete/104346/bad+code Del: spam -- https://master.php.net/note/delete/104346/spam Del: non-english -- https://master.php.net/note/delete/104346/non-english Del: in docs -- https://master.php.net/note/delete/104346/in+docs Del: other reasons-- https://master.php.net/note/delete/104346 Reject -- https://master.php.net/note/reject/104346 Search -- https://master.php.net/manage/user-notes.php