Entry

Is it possible to forge a request while uploading file to compromise $_FILES['userfile']['name'] ?

Feb 27th, 2004 16:45
a b,

Is it possible to forge a request while uploading file so what $_FILES
['userfile']['name'] will be '..\..\script.php' ?

Can anybody capture with ethereal request/answer headers for uploading 
process ? I'm on ppp connection where ethereal unable to capture 
packets.