On 18 Aug 2006 at 12:41, Javier Albinarrate wrote:
> This opens the possibility of making things like
> images/../../../../blah.txt
Yes
> If other directories should be allowed, then these should be
> speciffically allowed I think.
> Like:
>
> elsif ($fil !~ /^(images\/|notes\/)?[\w-\.]+\.txt$/i){
Do we need to be that restrictive?
Also, I've just discovered that we need .db files in there. Currently you
can't look at your
pb/.db files through the interface.
Remind me what we're trying to do here?
Paul
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user
