Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!news.musoftware.de!wum.musoftware.de!fu-berlin.de!uni-berlin.de!not-for-mail
From: "M. Strobel" <sorry_no_mail_here@nowhere.dee>
Newsgroups: comp.lang.php
Subject: Re: Why and wherefore file downloads
Date: Sun, 15 Jan 2012 00:06:23 +0100
Lines: 36
Message-ID: <9neg3fFicpU1@mid.uni-berlin.de>
References: <87ehv25dm4.fsf@newsguy.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Trace: news.uni-berlin.de Hc7MZzBI4EdeFzWHc3T+Cw47LojklY41Y+cqet0a5gvGmxj4w=
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.24) Gecko/20111101 SUSE/3.1.16 Lightning/1.0b2 Thunderbird/3.1.16
In-Reply-To: <87ehv25dm4.fsf@newsguy.com>
Xref: x330-a1.tempe.blueboxinc.net comp.lang.php:4464

Am 14.01.2012 19:43, schrieb Harry Putnam:
---cut
> -------        ---------       ---=---       ---------      -------- 
> From_mohitsharma.net.php
> 
> php
> 
> <?php
>    // The file path where the file exists
>    $filepath = "**HERE**".$_GET['filename']."";
---cut

>    @readfile($filepath);
>   ?>
--------------cut

> ------- 8< snip ---------- 8< snip ---------- 8<snip ------- 
> #!/usr/bin/perl
> 
> use strict;
> use warnings;
> use diagnostics;
> 
> my ($frdir,$reg, @files, $php);
> $php = './Frommohitsharma.net.php';

your perl calls Frommohitsharma.net.php, but you print  From_mohitsharma.net.php.

You are calling a different script.

This is the only explanation because the parameter filepath is used unchanged in the
readfile() function and it should not work if you change it.

BTW, this looks terribly unsecure.

/Str.