FUDforum: comp.lang.php » Why and wherefore file downloads

Home » Imported messages » comp.lang.php » Why and wherefore file downloads

Show: Today's Messages :: Polls :: Message Navigator

Re: Why and wherefore file downloads [message #176654 is a reply to message #176653]

Sat, 14 January 2012 23:06

M. Strobel
Messages: 386
Registered: December 2011

Karma:

Senior Member

Am 14.01.2012 19:43, schrieb Harry Putnam:
---cut
> ------- --------- ---=--- --------- --------
> From_mohitsharma.net.php
>
> php
>
> <?php
> // The file path where the file exists
> $filepath = "**HERE**".$_GET['filename']."";
---cut

> @readfile($filepath);
> ?>
--------------cut

> ------- 8< snip ---------- 8< snip ---------- 8<snip -------
> #!/usr/bin/perl
>
> use strict;
> use warnings;
> use diagnostics;
>
> my ($frdir,$reg, @files, $php);
> $php = './Frommohitsharma.net.php';

your perl calls Frommohitsharma.net.php, but you print From_mohitsharma.net.php.

You are calling a different script.

This is the only explanation because the parameter filepath is used unchanged in the
readfile() function and it should not work if you change it.

BTW, this looks terribly unsecure.

/Str.

Report message to a moderator

[Message index]

		Why and wherefore file downloads By: Harry Putnam on Sat, 14 January 2012 18:43
		Re: Why and wherefore file downloads By: M. Strobel on Sat, 14 January 2012 23:06
		Re: Why and wherefore file downloads By: Harry Putnam on Tue, 17 January 2012 01:01
		Re: Why and wherefore file downloads By: M. Strobel on Wed, 18 January 2012 08:21

Previous Topic:	bind_param - vars not literals
Next Topic:	phpmyadmin config problems

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sat Nov 30 23:20:18 GMT 2024

Total time taken to generate the page: 0.04554 seconds