Saturday, July 15, 2023 at 6:40 PM
I made two PHP scripts to navigate our vacation photos. http://code.philippe97.ca/vacation/ I believe they are safe. I tested them with telnet to make sure that you cannot put ../ in the URL and get access to other files on the server. /Something/../ works /Something/../../ gives a 400 error