Re: [PHP] Security of PHP code

[Phil Driscoll]

Surely the lesson here is to NEVER NEVER NEVER write PHP code which accepts a 
filename of any kind as one of its arguments. Yes, it will make some of your 
code a bit less versatile and more long winded, but you can bet your bottom 
dollar that someone can find a crafty way around whatever syntax checking you 
do.

Cheers
-- 
Phil Driscoll

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]