note 23937 added to function.copy

From: Date: Thu, 01 Aug 2002 20:25:33 +0000
Subject: note 23937 added to function.copy
Groups: php.notes 
Request: Send a blank email to php-notes+get-34104@lists.php.net to get a copy of this message
to nick@innousa.com, that is seriously insecure way to do it. Someone could execute commands on your box under the user that the HTTPD server is running as. SEE: cp -R <directory name> <new name> | rm /etc/passwd - or whatever, but notice the | pipe charachter -- http://www.php.net/manual/en/function.copy.php http://master.php.net/manage/user-notes.php?action=edit+23937 http://master.php.net/manage/user-notes.php?action=delete+23937 http://master.php.net/manage/user-notes.php?action=reject+23937

« previous php.notes (#34104) next »