|
Posted by Rik on 01/12/07 16:59
Robin wrote:
> As no one else has pointed it out (though it should be obvious)...
>
> Doing include($file) without any validation of $file would be a big
> bad security hole.
It never even occured to me to include files I did not write myself :P
Validating a file is very difficult, you'll have to check it by hand.
--
Rik Wasmus
Navigation:
[Reply to this message]
|