note 9364 modified in PDF functions by jmcastagnetto

[Editor's note: See the section "Security" in the manual for more information on this and other security matters] The script getpdf.php should only be used to learn the concept of passing a file through a script and not actually used to perform this task. In its current state, there is a large security flaw which enables many files (including all your php source) to be viewed by anyone. For example http://server/getpdf.php?filename=/etc/passwd shows the servers machines password file. http://www.php.net/manual/pdf-functions.php