Need to remove all "../" "/.." from user inputing string to prevent him walking and creating files&directories where I don't whant see them/him...
The string: $path = eregi_replace('([..]{2,})|([./]{2})|([../]{3,})|([/.]{2})|([/..]{3})', '', $path); works good with any combinations ( ../../..qwert.txt => qwert.txt) untill somth like "/../asd/../qwert.txt" will be entered ... (/../asd/../qwert.txt => asdqwert.txt). So the qwestion is how upgrade regular expression to remove all this correctly (with all entered directory names but NOT assigned their names to file name... Must do the operation: /../asd/......../qwert.txt => qwert.txt but not => /asd/qwert.txt or asdqwert.txt.ru or /................../asd/../qwert.txt.ru => qwert.txt.ru but not => /asd/qwert.txt.ru or asdqwert.txt.ru Thanks. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]