note 110050 added to function.readfile
| From: | pabloa at trustedtranslations dot net | Date: | Fri, 14 Sep 2012 14:49:55 +0000 |
| Subject: | note 110050 added to function.readfile | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-190766@lists.php.net to get a copy of this message | ||
If you have a file /home/user/test.txt then all these calls will work fine:
<?
readfile("/home/user/test.txt"); // obviously, but also ...
readfile("/home/something_else/../user/test.txt"); // and even ...
readfile("/home/one/../user/two/../test.txt");
?>
This is even if no directory called "something_else" or "one", "two",
exist. It took me hours to figure this out.
----
Server IP: 69.147.83.197
Probable Submitter: 190.195.114.192
----
Manual Page -- http://www.php.net/manual/en/function.readfile.php
Edit -- https://master.php.net/note/edit/110050
Del: integrated -- https://master.php.net/note/delete/110050/integrated
Del: useless -- https://master.php.net/note/delete/110050/useless
Del: bad code -- https://master.php.net/note/delete/110050/bad+code
Del: spam -- https://master.php.net/note/delete/110050/spam
Del: non-english -- https://master.php.net/note/delete/110050/non-english
Del: in docs -- https://master.php.net/note/delete/110050/in+docs
Del: other reasons-- https://master.php.net/note/delete/110050
Reject -- https://master.php.net/note/reject/110050
Search -- https://master.php.net/manage/user-notes.php