note 107398 deleted from function.realpath by tularis
| From: | tularis@php.net | Date: | Wed, 08 Feb 2012 17:30:12 +0000 |
| Subject: | note 107398 deleted from function.realpath by tularis | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-185921@lists.php.net to get a copy of this message | ||
Note Submitter: vsemak at gmail dot com
----
This pattern is not good enough: \'/\\w+\\/\\.\\.\\//\' becouse this egzample will return
fail result:
path = \'../my.sub.directory/../\'
will return: \'../my.sub./\'
To solve this just change pattern to: '/(?!\.\.)(?!\.\/)[a-zA-Z0-9\.\-_]+\/\.\.\//'
Result will by: \'../\'