Nicely done overall.
You might want to lock down functions like glob() and readfile() in PHP -- they effectively give the coder read access to your file system.
You might want to lock down functions like glob() and readfile() in PHP -- they effectively give the coder read access to your file system.