note 41653 added to function.header

From: Date: Sun, 18 Apr 2004 13:23:25 +0000
Subject: note 41653 added to function.header
Groups: php.notes 
Request: Send a blank email to php-notes+get-68288@lists.php.net to get a copy of this message
Beware of the security hole in the example posted on April 15 by kidgeek at kidgeek dot com. Never trust user input. You can walk the path with $file_name = '../../..', etc. Use basename($file_name), which will return just the base file name, to prevent that. ---- Manual Page -- http://www.php.net/manual/en/function.header.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+41653 Delete -- http://master.php.net/manage/user-notes.php?action=delete+41653&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+41653&report=yes Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#68288) next »