Is running $_FILES thru stripslashes (or other input filtering scheme)?
I'm trying to muck around with PhotoStack and it's running $_FILES thru it, which is removing the path seperators in ['tmp_name']...
Would it be safe for me to just comment out the $_FILES processing? or would I be leaving the script open, and therefore be better off checking for $_FILES, or even just the 'tmp_name' key and skipping the stripslashes.
Strip Slashes $_FILES
Moderator: General Moderators
- jayshields
- DevNet Resident
- Posts: 1912
- Joined: Mon Aug 22, 2005 12:11 pm
- Location: Leeds/Manchester, England