[pmwiki-users] Includes
Patrick R. Michaud
pmichaud at pobox.com
Wed Feb 23 15:47:40 CST 2005
On Wed, Feb 23, 2005 at 09:48:56PM +0100, Nils Knappmeier wrote:
> Patrick R. Michaud wrote:
> > Markup('includefile', 'directives',
> > '/\\(:includefile\\s+([-\\w.]+):\\)/e',
> > "Keep(implode('', file('/path/to/safe/includes/$1')))");
> >
> How about if someone does a (:includefile ../something.html:) ?
Note that the filename pattern doesn't match slashes, so there's
no way out of the prison. ([-\\w.]+) matches only hyphens, dots,
alphanumeric characters, and the underscore.
Pm
More information about the pmwiki-users
mailing list