This is no legal unix path, because index.php is a file and not a
Oops, missed that part of the path, just looked at the .. :-)
And to understand the security impact: include "./foo/bar/template_".$userinput;
... which I'd consider bad practice anyway but that's another story :-)
- Chris
-- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php
