> I just realised that
> 
> Example 34-2. Validating file uploads
> 
> Is still showing a bullshit example. It constructs a destination path 
> for move_uploaded_file() that consists of user input. There is no sanity 
> check on it like removing / and .. sequences.
> 
> Can one of the DOC guys finally fix this code?

How about you provide a patch? Or a real suggestion? Instead 
of some insulting subject and message. In the very least you
may use bugs.php.net to file a bug report.

Regards,
Philip

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to