|
Posted by Alfred Molon on 05/15/07 18:24
In article <8gch43lufh9e3u7cdg1nqnbmoi798svu38@news.markshouse.net>, usenet@listmail.good-stuff.co.uk says...
> There are two solutions to that. The easiest, if you can do it, is to
> switch it off either sitewide (using .htaccess) or in the upload
> script (using php_ini_set()). If you can't, then you need to pass the
> variables through stripslashes() before processing them with your file
> handling routine.
Well, in the end I changed the user interface. Now there is a file
selection window and a separate picture name field. The filename can be
anything (it is just ignored). The picture name text field is processed
with preg_replace to ensure that only the specified characters are in
it.
--
Alfred Molon
http://www.molon.de - Photos of Asia, Africa and Europe
Navigation:
[Reply to this message]
|