[5415] in bugtraq
Followup to PHP bug
daemon@ATHENA.MIT.EDU (bryan berg)
Sun Oct 19 22:23:00 1997
Date: Sun, 19 Oct 1997 20:50:17 -0400
Reply-To: bryan berg <km@UNDERWORLD.NET>
From: bryan berg <km@UNDERWORLD.NET>
To: BUGTRAQ@NETSPACE.ORG
I wrote that fix without testing it... it does not work, I'm just a little
slow sometimes... ;)
Instead of using the ereg_replace line I submitted before, use the
following block of code, again, right before <?include... line.
<?if(ereg("\/",$screen)) {
echo "Permission denied: path may not contain slashes.";
Exit;
}
>
Sorry about that... this has been confirmed on my machine and does work.
bryan
---
bryan berg % km@underworld.net % http://www.underworld.net/~km/
system administrator, the underworld project
"i was blessed with a birth and a death and i guess
i just want some say in between" -- ani difranco
