?php $username = $_SERVER[ 'REMOTE_USER']; / / using an authentication mechanisim $homedir = "/ home / $username"; if (!ereg('^[^. / ][^ / ]*$', $userfile)) die('bad filename'); / /die, do not process if (!ereg('^[^. / ][^ / ]*$', $username)) die('bad username'); / /die, do not process / /etc...?
?php $username = $HTTP_SERVER_VARS[ 'REMOTE_USER'];; $homedir = "/ home / $username"; if (!ereg('^[^. / ][^ / ]*$', $username)) die('Erreur de nom de fichier'); / /meurt, ne SURTOUT pas traiter! / /etc...?