the harm. One simple exploit leading to information disclosure is to pass it an array() causing the function to generate an error exposing the script's path.

You mean when running with display_errors = on? Ouch.

--
Stanislav Malyshev, Zend Products Engineer
[EMAIL PROTECTED]  http://www.zend.com/

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to