note 29443 added to security.filesystem

The comment about replacing "." by "" is misleading people into believing that this is a way of cleaning strings of nasty content. The author just forgot the obvious - using absolute paths, such as "/the/secret/path/to/secrets.txt" and "/etc/passwd". -- http://www.php.net/manual/en/security.filesystem.php http://master.php.net/manage/user-notes.php?action=edit+29443 http://master.php.net/manage/user-notes.php?action=delete+29443 http://master.php.net/manage/user-notes.php?action=reject+29443