Arbitrary file read to watch out for (as spotted on

This is not the most complex vulnerability in the world, but it highlights a really common issue that I thought would be valuable to share:

And, since I didn’t mention it in the post, René acknowledged and fixed this issue super-fast!