Simon Zalar
Results
1
issues of
Simon Zalar
Your code lets the attacker set the filename and data. Anyone can set the file to Something.php and fill it with something evil.