RE: LUA 4.x - filesystem access limit?

[Rob Kendrick <lua-l@...>]

On Wed, 2003-09-24 at 14:01, Zdenek Stangl wrote:
> Then I will parse the path and cutoff all preceeding '..\\'

Surely this doesn't protect you from a user asking for
../wibble/../../foo ?

There's no simple way of doing this.  Does Windows have a call to find
the canonical path and leaf name of a path you give it?  If it does,
making use of that and then comparing it to the directory you want to
keep the script contained in may be the easiest way.

Does Windows have symlinks, or similar concepts?  If not, then you're
job's a little easier too :)

-- 
Rob Kendrick, Pepperfish Limited                   http://www.pepperfish.net/
PGP signed or encrypted mail welcome                         Key ID: 3651D17A