Really unsecure php image proxy.

unsecure_php_image_proxy.php

<?php

$filename = $_GET['url'];
$ext = pathinfo($filename, PATHINFO_EXTENSION);

switch ($ext) {
    case "gif":
        header('Content-Type: image/gif');
        readfile($filename);
        break;
    case "png":
        header('Content-Type: image/png');
        readfile($filename);
        break;
    case "jpg":
    default:
        header('Content-Type: image/jpeg');
        readfile($filename);
        break;
}
?>

curl http://localhost/unsecure_php_image_proxy.php?url=/etc/passwd

how to fix ?

by changing:
readfile($filename);
to:
readfile('./images/' . $filename);

Very insecure, my friend.