PHP: preg_replace - Manual - PHP: Hypertext Preprocessor

People using functions like scandir with user input and protecting against "../" by using preg_replace make sure you run ir recursivly untill preg_match no-long finds it, because if you don't the following can happen. If a user gives the path:

php.net