Re: [PHP] /etc/passwd

[Fejes Jozsef]

My method is:
1. check if id starts with /
if(ereg("^\/", $id))
  goaway;

2. check if there is .. in it
if(ereg("\.\.", $id))
  goaway;



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php