[PHP] safe uploading with PHP

2001-04-25 Thread Steven Haryanto
I am sorry if this is one of the FAQ. Last time I checked (well, a few months ago), PHP has the vulnerability that the user who submitted the form can manipulate the global namespace to let PHP pick up arbitrary file in the system. Can we now do safe file uploading without turning off

Re: [PHP] safe uploading with PHP

2001-04-25 Thread Rasmus Lerdorf
Last time I checked (well, a few months ago), PHP has the vulnerability that the user who submitted the form can manipulate the global namespace to let PHP pick up arbitrary file in the system. Can we now do safe file uploading without turning off register_globals? Yes, this was fixed a