Re: Security
| From: | Koos van den Hout | Date: | Mon, 02 Oct 2000 20:08:21 +0000 |
| Subject: | Re: Security | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-3233@lists.php.net to get a copy of this message | ||
Quoting Enrico Comini who wrote on Thu, Sep 21, 2000 at 06:35:42PM +0200:
> There are too INDEX.PHP3 and INDEX.HTML but if ONE see the file list and
> download the php files then He read my script with user name and password to
> connect my database and other information.
If php3 is a recognized as extension for php source then it will be
impossible to download it. It'll simply execute the source.
(Haven't we had this before?)
Koos
--
Koos van den Hout, PGP keyid RSA/1024 0xCA845CB5 via keyservers
koos@kzdoos.xs4all.nl or DSS/1024 0xF0D7C263 -?)
Fax +31-30-2817051 Visit my site about books with reviews /\\
http://idefix.net/~koos/ http://www.virtualbookcase.com/ _\_V