note 9364 added to PDF functions

The script getpdf.php should only be used to learn the concept of passing a file through a script and not actually used to perform this task. In its current state, there is a large security flaw which enables many files (including all your php source) to be viewed by anyone. For example http://server/getpdf.php?filename=/etc/passwd shows the servers machines password file. http://www.php.net/manual/ref.pdf.php