[Date Prev][Date Next][Thread Prev][Thread Next][Interchange by date
][Interchange by thread
]
[ic] Re: [include pages/[mv_arg] ]
Rene Hertell writes:
> Hello,
>
> I'm trying to include files with cgi-parameters into one of my pages. My tag
> syntax
> ([include pages/[mv_arg] ]) of this tag does obviously not work, but I don't
> know any other way doing it..
>
> Any help is really much appreciated!
You should be more security aware !! The user can view any file
in your catalog tree with the above code, e.g mv_arg=../products/access.asc
Bye
Racke
--
Prolific Interchange Consulting (Excellent German Quality !).
Take a look at Materialboerse (http://www.materialboerse.de/), WITT
(http://www.witt-weiden.de/), Boxmover (http://shop.boxmover.ch/) or
Passionshop (http://www.passionshop.com/racke). Need a shop ? Contact us.