note 29443 deleted from security.filesystem by nlopess
| From: | nlopess@php.net | Date: | Tue, 13 Jan 2004 15:24:26 +0000 |
| Subject: | note 29443 deleted from security.filesystem by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-63452@lists.php.net to get a copy of this message | ||
Note Submitter: michael a-t zedeler d o t dk
----
The comment about replacing "." by "" is misleading people into believing that
this is a way of cleaning strings of nasty content. The author just forgot the obvious - using
absolute paths, such as "/the/secret/path/to/secrets.txt" and "/etc/passwd".