Hi. I need some hopefully quick help. I need to deliver a

Question

Hi. I need some hopefully quick help. I need to deliver a

file from outside the webserver.
I'm doing this by taking the name of the file I want as a query parameter.

The problem Im faced with is that this allows them to specify ANY path, including a lot of ../ to gain access to other parts of the system.

How can I limit the access to only a specific folder?

0

05.11.2017

1 ответов

10 просмотров

Emad💻📱 · Accepted Answer

Emad💻📱

check if the value has any slashes

0

05.11.2017

Похожие чаты

Hi. I need some hopefully quick help. I need to deliver a

1 ответов

Похожие вопросы