// Verhindert den Verzeichiswechsel if(!empty($_POST["filename"]) && !preg_match("=\.\.%2F|\.\./=",$_POST["filename"])) { $mytxt = $_POST["zeit"]."\n".stripslashes(urldecode($_POST["eingabe_pur"]))."\n"; $fp = fopen ($_POST["filename"], "w+"); fwrite($fp,"$mytxt"); if ($fp) { echo ("&erro=NONE&"); } else { echo ("&erro=OK&"); } fclose($fp); } else { echo ("&erro=OK&"); } ?>