Posted by Bret Hughes on 02/24/05 16:22

On Thu, 2005-02-24 at 01:04, Dotan Cohen wrote:
> > that. A little javascript goes a long way in these sort of situations
>
> You don't want to do that will javascript. I, for one, surf with
> javascript turned off. The malicious script kiddie, I would presume,
> also would be very happy to send you a silly filename without letting
> javascript check it.

Very good point.

Bret

• Prev in thread: Re: [PHP] uploading files with a single quote in the filename
• Next in forum: RE: [PHP] PHP slowness
• Prev in forum: Re: [PHP] Identifying a user who previously created a profile
• Thread view: uploading files with a single quote in the filename

[Reply to this message]