You could access any image on the webserver, for example:
I think the script should check whether there is an
'../' in the filename and should stop or display an
error image if there is one.
Log in to post a comment.