Re: [PHP] /etc/passwd

[Marek Kilimajer]

Add a check for php files, or any other files you don't want anybody to 
include:
if(ereg('php[0-9]$', $id))
   goaway;

Fejes Jozsef wrote:

My method is:
1. check if id starts with /
if(ereg("^\/", $id))
  goaway;
2. check if there is .. in it
if(ereg("\.\.", $id))
  goaway;




--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php