note 41653 added to function.header
| From: | mattatepoochdotcom at rn2 dot php dot net | Date: | Sun, 18 Apr 2004 13:23:25 +0000 |
| Subject: | note 41653 added to function.header | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-68288@lists.php.net to get a copy of this message | ||
Beware of the security hole in the example posted on April 15 by kidgeek at kidgeek dot com. Never
trust user input. You can walk the path with $file_name = '../../..', etc. Use
basename($file_name), which will return just the base file name, to prevent that.
----
Manual Page -- http://www.php.net/manual/en/function.header.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+41653
Delete -- http://master.php.net/manage/user-notes.php?action=delete+41653&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+41653&report=yes
Search -- http://master.php.net/manage/user-notes.php