The test in the php file could, of course, be modified to fire the error only if the ".." represent actually a path traversal - that is, at the beginning of the path, followed by a "/", or checking the resulting expanded path - but this is not the point: I would suggest you name the file as 02-PETROL.mp3, and set the correct track number/artist/album/title in the metadata tag... moOde use those data to fill the library entries.
Also, using only standard ASCII, and no path-related symbols in the filename can also guarantee cross-OS compatibility.
Also, using only standard ASCII, and no path-related symbols in the filename can also guarantee cross-OS compatibility.
