[pmwiki-users] Includes

Patrick R. Michaud pmichaud at pobox.com
Wed Feb 23 15:47:40 CST 2005


On Wed, Feb 23, 2005 at 09:48:56PM +0100, Nils Knappmeier wrote:
> Patrick R. Michaud wrote:
> >     Markup('includefile', 'directives',
> >     '/\\(:includefile\\s+([-\\w.]+):\\)/e',
> >     "Keep(implode('', file('/path/to/safe/includes/$1')))");
> >
> How about if someone does a (:includefile ../something.html:) ?

Note that the filename pattern doesn't match slashes, so there's
no way out of the prison.  ([-\\w.]+) matches only hyphens, dots, 
alphanumeric characters, and the underscore.

Pm



More information about the pmwiki-users mailing list