> I just realised that > > Example 34-2. Validating file uploads > > Is still showing a bullshit example. It constructs a destination path > for move_uploaded_file() that consists of user input. There is no sanity > check on it like removing / and .. sequences. > > Can one of the DOC guys finally fix this code?
How about you provide a patch? Or a real suggestion? Instead of some insulting subject and message. In the very least you may use bugs.php.net to file a bug report. Regards, Philip -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php