Some (bad) examples(3)

• From that URL a script is invoked:

• $url = $ENV{HTTP_REFERER}; # temp. url

• ($url, $dummy) = split(/\?/, $url);

• $url =~ s@http://site/@@;

• $url =~ s/%20/ /g;

• unlink "$htdocs/$url";

• Try: HTTP_REFERER eq "../../../somefile"