Re^5: somethign wrong with the sumbit

if the submitted param contains slashes and dots?

You aren't testing against that. You just say 'else' without a test. So if there's no null byte in the param, you assume there's a "*Backwards Directory Traversal*".

--shmem

_($_=" "x(1<<5)."?\n".q·/)Oo.  G°\        /
                              /\_¯/(q    /
----------------------------  \__(m.====·.(_("always off the crowd"))."·
");sub _{s./.($e="'Itrs `mnsgdq Gdbj O`qkdq")=~y/"-y/#-z/;$e.e && print}

Comment on Re^5: somethign wrong with the sumbit