note 9563 modified in security.filesystem by irc-html

I think the lesson is clear: (1) Forbit path separators in usernames. (2) map username to a physical home directory - /home/username is fine (3) read the home directory (4) present only results of (3) as an option for deletion. I have discovered a marvelous method of doing the above in php but this submission box is too small to contain it. :-) --was-- I think the lesson is clear: (1) Forbit path separators in usernames. (2) map username to a physical home directory - /home/username is fine (3) read the home directory (4) present only results of (3) as an option for deletion. I have discovered a marvelous method of doing the above in php but this submission box is too small to contain it. :-) [ED: Should your email not be p.fermat@last.theorem.com ;)] http://www.php.net/manual/en/security.filesystem.php