My friend let me look at his source code, and I just got around to it. I would ask him, but he's in vacation at switzerland.
$path = $_SESSION['a']['b'][$_GET['c']];
What exactly does that mean? Does it just concatenate those?
If I sent in Cookie:a=/a/&b=b/ along with ?c=test.php , would the $path var be /a/b/test.php? If not, what would it be equal to?
print_r($_SESSION);andecho $_GET['c'];and see if you can work it out.$_SESSIONis an array, the element with keyais accessed, then the element with the keybis accessed withina, finally the$_GETvalue ofcis used to access an element of arrayb. ;)$_GET['c']as a key for their array. Nothing really technical or fancy going on here at all.