> [testpage.php]
> $code = $_POST['code'];
> if (file_exists("tmp/$code")) {
>  unlink("tmp/$code");
> }

> I'm pretty chuffed with it, though you pro's will probably shoot it down.
> Is it any good?

The condition for deleting the semaphore-file is not well formed.
If you only delete them if they were used you will soon have a lot of unused 
md5s filling your harddrive.
Some people will open the form but not submit it.
So delete all files older x minutes!

Also filter $_POST['code'] for unallowed chars like theese: \ / | > < . : &

if (isset($_POST['code']))
  $code=preg_replace("/[^0-9a-zA-Z]/","",$_POST['code']);

HTH 



Community email addresses:
  Post message: [email protected]
  Subscribe:    [EMAIL PROTECTED]
  Unsubscribe:  [EMAIL PROTECTED]
  List owner:   [EMAIL PROTECTED]

Shortcut URL to this page:
  http://groups.yahoo.com/group/php-list 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/php-list/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 



Reply via email to