PHP Classes

A Security BUG

Recommend this page to a friend!

      OCR CAPTCHA  >  All threads  >  A Security BUG  >  (Un) Subscribe thread alerts  
Subject:A Security BUG
Summary:With this bug, user can delete any png(or jpg) file on server.
Messages:1
Author:Oleg
Date:2007-09-13 22:27:22
 

 


  1. A Security BUG   Reply   Report abuse  
Picture of Oleg Oleg - 2007-09-13 22:27:22
With this bug, user can delete any png(or jpg) file on server.
You must add to
function get_filename($public) {

add

function get_filename($public) {
$public = basename($public);