> I think that php_checkuid() should be called with > CHECKUID_ALLOW_ONLY_FILE (whcih does not exist yet) instead of > CHECKUID_ALLOW_ONLY_DIR. Meaning -- if the passed "filename" does not > meet UID/GID test, it should *not* try stripping the last element and > trying agian. Sounds right. -Rasmus -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]