The server processes the request and serves the sensitive system file instead of the contact page. 4. How to Defend Your System

Automatically strip out characters like . and / from user-provided filenames.

If you're concerned about accesses to sensitive paths like /etc/passwd in your logs:

-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd

-page-....-2f-2f....-2f-2f....-2f-2fetc-2fpasswd -

The server processes the request and serves the sensitive system file instead of the contact page. 4. How to Defend Your System

Automatically strip out characters like . and / from user-provided filenames. -page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd

If you're concerned about accesses to sensitive paths like /etc/passwd in your logs: The server processes the request and serves the

-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd
-page-....-2F-2F....-2F-2F....-2F-2Fetc-2Fpasswd