[Date Prev][Date Next][Thread Prev][Thread Next]
[Date Index]
[Thread Index]
- Subject: Re: RE: LUA 4.x - filesystem access limit?
- From: "D Burgess" <db@...>
- Date: Wed, 24 Sep 2003 23:31:16 +1000
GetFullPathName()
+++++++++++++++++++++++++++++++++
>On Wed, 2003-09-24 at 14:01, Zdenek Stangl wrote:
>> Then I will parse the path and cutoff all preceeding '..\\'
>
>Surely this doesn't protect you from a user asking for
>.../wibble/../../foo ?
>
>There's no simple way of doing this. Does Windows have a call to find
>the canonical path and leaf name of a path you give it? If it does,
>making use of that and then comparing it to the directory you want to
>keep the script contained in may be the easiest way.
>
>Does Windows have symlinks, or similar concepts? If not, then you're
>job's a little easier too :)
>
>--
>Rob Kendrick, Pepperfish Limited http://www.pepperfish.net/
>PGP signed or encrypted mail welcome Key ID: 3651D17A