> > There are various methods for securing file_exists() ... > If you want to secure ... so that's unsecure , is'nt it ?
I didn't say that file_exists() is secure, did I? > > >I don't think that is critical problem. > If it's not a problem Why you show us a methode to secure ? I didn't say that it is not a problem but that it is not a critical problem. > I think many programmers don't know this problem exists ! > But there is too much hypocresy in php community to admit this > vulnerability. This is not a PHP vulnerability but a PHP Script vulnerablity, and I am sure that many php programmers are aware of security problems while using file_exists(). > The article : http://www.zend.com/zend/art/art-oertli.php > don't talk about this sorry... > What is the problem, very interesting article, old one but still very interesting. Best wishes, Escobar _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
