> I think that php_checkuid() should be called with
> CHECKUID_ALLOW_ONLY_FILE (whcih does not exist yet) instead of
> CHECKUID_ALLOW_ONLY_DIR. Meaning -- if the passed "filename" does not
> meet UID/GID test, it should *not* try stripping the last element and
> trying agian.

Sounds right.

-Rasmus


-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to