File Injection and Path Traversal Vulnerabilities

This post reviews a couple of injection-style vulnerabilities in an innocent-looking little snippet. Though PHP is used in this example, the same vulnerabilities could exist in any web application, regardless of the language being used.