Skip to content
zylus

Path Traversal

Path Traversal Blacklist

Section titled “Path Traversal Blacklist”
secure.php
str_replace("../","", $data);

..././..././..././..././..././..././..././..././..././..././

is equivalent to

../../../../../../../../../../