note 41653 deleted from function.header by betz
| From: | betz@php.net | Date: | Sun, 18 Apr 2004 13:40:01 +0000 |
| Subject: | note 41653 deleted from function.header by betz | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-68291@lists.php.net to get a copy of this message | ||
Note Submitter: matt at epooch dot com
----
Beware of the security hole in the example posted on April 15 by kidgeek at kidgeek dot com. Never
trust user input. You can walk the path with $file_name = '../../..', etc. Use
basename($file_name), which will return just the base file name, to prevent that.