Andy, On Tue, Nov 09, 2010 at 07:24:25PM +0800, Andy Sy wrote: > Was able to drastically simplify the patch by just replacing > > if ( strchr(user, '/') || ... > > with: > > if ( strstr(address, "..") || ...
You need to keep the user check as well! Alexander
