note 20367 added to function.copy

if you allow user uploads of pictures never forget to check the file extension before copying - a malicious user may upload php, pl, cgi, shtml, etc files: $ext=explode('.',$filename); $ext=strtolower($ext[count($ext)-1]); if (preg_match('/^(gif|png|jpe?g)$/',$ext)) { ............. -- http://www.php.net/manual/en/function.copy.php http://master.php.net/manage/user-notes.php?action=edit+20367 http://master.php.net/manage/user-notes.php?action=delete+20367 http://master.php.net/manage/user-notes.php?action=reject+20367