note 5812 deleted from features.file-upload by irc-html
| From: | irc-html@php.net | Date: | Sat, 19 Jan 2002 20:31:03 +0000 |
| Subject: | note 5812 deleted from features.file-upload by irc-html | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-25329@lists.php.net to get a copy of this message | ||
Be careful with the handling of $userfile.
Say upload.php3 simply displays the file on the screen,
or mails it.
Guess what happens if you try http://somewhere/upload.php3?userfile=/etc/passwd