note 42178 added to security.filesystem

Common and simple way to avoid path attack is separating objectname and filesystem space when possible. For example if I have users on my site and directory per user solution is not "httpdocs/users/$login", but "httpdocs/users/".md5($login) or "httpdocs/users/".$userId ---- Manual Page -- http://www.php.net/manual/en/security.filesystem.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+42178 Delete -- http://master.php.net/manage/user-notes.php?action=delete+42178&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+42178&report=yes Search -- http://master.php.net/manage/user-notes.php