Bugtraq mailing list archives
Followup to PHP bug
From: km () UNDERWORLD NET (bryan berg)
Date: Sun, 19 Oct 1997 20:50:17 -0400
I wrote that fix without testing it... it does not work, I'm just a little slow sometimes... ;) Instead of using the ereg_replace line I submitted before, use the following block of code, again, right before <?include... line. <?if(ereg("\/",$screen)) { echo "Permission denied: path may not contain slashes."; Exit; }
Sorry about that... this has been confirmed on my machine and does work. bryan --- bryan berg % km () underworld net % http://www.underworld.net/~km/ system administrator, the underworld project "i was blessed with a birth and a death and i guess i just want some say in between" -- ani difranco
Current thread:
- Followup to PHP bug bryan berg (Oct 19)