Bugtraq mailing list archives
Followup to PHP bug
From: km () UNDERWORLD NET (bryan berg)
Date: Sun, 19 Oct 1997 20:50:17 -0400
I wrote that fix without testing it... it does not work, I'm just a little
slow sometimes... ;)
Instead of using the ereg_replace line I submitted before, use the
following block of code, again, right before <?include... line.
<?if(ereg("\/",$screen)) {
echo "Permission denied: path may not contain slashes.";
Exit;
}
Sorry about that... this has been confirmed on my machine and does work.
bryan
---
bryan berg % km () underworld net % http://www.underworld.net/~km/
system administrator, the underworld project
"i was blessed with a birth and a death and i guess
i just want some say in between" -- ani difranco
Current thread:
- Followup to PHP bug bryan berg (Oct 19)
