Sanitize file path in PHP

by

realpath() will let you convert any path that may contain relative information into an absolute path…you can then ensure that path is under a certain subdirectory that you want to allow downloads from.

More Related Contents:

  1. xss attack on a php page
  2. How Secure Is This Login System? (Using Cookies In PHP)
  3. What are the best practices for avoiding xss attacks in a PHP site [closed]
  4. When should I use prepared statements?
  5. “Keep Me Logged In” – the best approach
  6. Full Secure Image Upload Script
  7. How safe are PHP session variables?
  8. Generating a random password in php
  9. What does it mean to escape a string?
  10. PHP $_SERVER[‘HTTP_HOST’] vs. $_SERVER[‘SERVER_NAME’], am I understanding the man pages correctly?
  11. Preventing session hijacking
  12. Why is using a mysql prepared statement more secure than using the common escape functions?
  13. Are mysql_real_escape_string() and mysql_escape_string() sufficient for app security?
  14. how safe are PDO prepared statements
  15. How to get rid of eval-base64_decode like PHP virus files?
  16. How can I relax PHP’s open_basedir restriction?
  17. “slash before every quote” problem [duplicate]
  18. How to create a laravel hashed password
  19. How to run PHP exec() as root?
  20. Hiding true database object ID in url’s
  21. Sanitizing user’s data in GET by PHP [duplicate]
  22. CodeIgniter – why use xss_clean
  23. Session hijacking and PHP
  24. Codeigniter CSRF – how does it work
  25. Session timeouts in PHP: best practices
  26. Best way to connect to MySQL with PHP securely [duplicate]
  27. Unique key generation
  28. Is it possible to execute PHP with extension file.php.jpg?
  29. When to use filter_input()
  30. Proper session hijacking prevention in PHP

Leave a Comment