note 104346 deleted from security.filesystem by danbrown
| From: | danbrown@php.net | Date: | Fri, 10 Jun 2011 15:28:57 +0000 |
| Subject: | note 104346 deleted from security.filesystem by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-180422@lists.php.net to get a copy of this message | ||
Note Submitter: george dot rood at gmail dot com
----
The Russian with the first comment has the best solution in my opinion. If the script reads all the
files to which the user ought to have access, then compares them to the user specified filename,
which must match only one, where is the vulnerability?