logo       

Re: opendir security hole: msg#03618

php.general

Subject: Re: opendir security hole

unfortunatly it still happens
"Analysis & Solutions" <danielc@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:20020523152342.GB3933@xxxxxxxxxxxx
> On Thu, May 23, 2002 at 11:22:28PM +1000, daniel wrote:
> > dir=../../../../ it will show you the root dir of the server , how can i
>
> Before passing the $Dir variable to the file functions, clean it up...
>
> $Dir = preg_replace('/..\//', '', $Dir);
>
> --Dan
>
> --
> PHP classes that make web design easier
> SQL Solution | Layout Solution | Form Solution
> sqlsolution.info | layoutsolution.info | formsolution.info
> T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y
> 4015 7 Av #4AJ, Brooklyn NY v: 718-854-0335 f: 718-854-0409



--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise