note 5812 modified in Handling file uploads by ronabop
| From: | ronabop@php.net | Date: | Thu, 14 Sep 2000 17:35:42 +0000 |
| Subject: | note 5812 modified in Handling file uploads by ronabop | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-5021@lists.php.net to get a copy of this message | ||
Be careful with the handling of $userfile.
Say upload.php3 simply displays the file on the screen,
or mails it.
Guess what happens if you try http://somewhere/upload.php3?userfile=/etc/passwd
http://www.php.net/manual/handling-file-uploads.php