PhpDig.net - View Single Post

rayvd · 01-14-2004, 01:15 PM

Hmm... it looks legit, but I think there would only be a problem if register_globals were on *gasp*. $relative_script_path could be overwritten with a form variable and you could read in files off the filesystem.

Correct?

01-14-2004, 01:15 PM	#3
rayvd Green Mole Join Date: Oct 2003 Location: Mesa, AZ Posts: 15	Hmm... it looks legit, but I think there would only be a problem if register_globals were on gasp. $relative_script_path could be overwritten with a form variable and you could read in files off the filesystem. Correct?