Strip Slashes $_FILES
Posted: Sat Sep 09, 2006 11:48 am
Is running $_FILES thru stripslashes (or other input filtering scheme)?
I'm trying to muck around with PhotoStack and it's running $_FILES thru it, which is removing the path seperators in ['tmp_name']...
Would it be safe for me to just comment out the $_FILES processing? or would I be leaving the script open, and therefore be better off checking for $_FILES, or even just the 'tmp_name' key and skipping the stripslashes.
I'm trying to muck around with PhotoStack and it's running $_FILES thru it, which is removing the path seperators in ['tmp_name']...
Would it be safe for me to just comment out the $_FILES processing? or would I be leaving the script open, and therefore be better off checking for $_FILES, or even just the 'tmp_name' key and skipping the stripslashes.