Re: Re[2]: [PHP-DEV] [PROPOSAL] defense against session takeovers

From:	Ivan Ristic	Date:	Fri, 01 Feb 2002 23:20:05 +0000
Subject:	Re: Re[2]: [PHP-DEV] [PROPOSAL] defense against session takeovers
References:	1	Groups:	php.dev
Request:	Send a blank email to php-dev+get-78828@lists.php.net to get a copy of this message

> Why would you switch on safe_mode if you have a dedicated server?  That
> makes no sense.

  It can be useful to minimise the damage in case someone finds a hole
  in your PHP scripts, and the hole allows them to access files on
  the server.

--
Ivan Ristic, ivan.ristic@iname.com
[ Weblog on PHP, Software development, Intranets,
and Knowledge Management: http://www.webkreator.com ]



   

Thread (20 messages)

• Sander RoobolFri, 01 Feb 2002 16:42:47 +0000
  • Rasmus LerdorfFri, 01 Feb 2002 16:58:08 +0000
    • George SchlossnagleFri, 01 Feb 2002 18:14:50 +0000
      • Stefan EsserFri, 01 Feb 2002 19:06:00 +0000
        • Daniel LorchFri, 01 Feb 2002 22:15:03 +0000Re[2]: [PHP-DEV] [PROPOSAL] defense against session takeovers
          • Rasmus LerdorfFri, 01 Feb 2002 23:04:21 +0000
            • Ivan RisticFri, 01 Feb 2002 23:20:05 +0000Re: Re[2]: [PHP-DEV] [PROPOSAL] defense against session takeovers
            • Daniel LorchSat, 02 Feb 2002 10:49:39 +0000Re[3]: [PHP-DEV] [PROPOSAL] defense against session takeovers
          • Christophe SolletSat, 02 Feb 2002 16:00:54 +0000Workaround against session spoofing and session gc
            • Daniel LorchSat, 02 Feb 2002 17:38:30 +0000Re: Workaround against session spoofing and session gc
      • Ivan RisticFri, 01 Feb 2002 20:40:29 +0000
        • Rasmus LerdorfFri, 01 Feb 2002 20:46:59 +0000
          • Ivan RisticFri, 01 Feb 2002 21:12:40 +0000
            • Rasmus LerdorfFri, 01 Feb 2002 21:15:26 +0000
            • Stefan EsserFri, 01 Feb 2002 21:24:16 +0000
              • Ivan RisticSat, 02 Feb 2002 13:06:42 +0000
                • Ivan RisticSat, 02 Feb 2002 13:17:29 +0000
            • Alan KnowlesSat, 02 Feb 2002 02:21:21 +0000
        • Hartmut HolzgraefeMon, 04 Feb 2002 12:49:05 +0000
          • Ivan RisticTue, 05 Feb 2002 09:56:42 +0000
• Unknown Message
  • Sander RoobolFri, 01 Feb 2002 16:42:47 +0000
    • Rasmus LerdorfFri, 01 Feb 2002 16:58:08 +0000
      • George SchlossnagleFri, 01 Feb 2002 18:14:50 +0000
        • Stefan EsserFri, 01 Feb 2002 19:06:00 +0000
          • Daniel LorchFri, 01 Feb 2002 22:15:03 +0000Re[2]: [PHP-DEV] [PROPOSAL] defense against session takeovers
            • Rasmus LerdorfFri, 01 Feb 2002 23:04:21 +0000
              • Ivan RisticFri, 01 Feb 2002 23:20:05 +0000Re: Re[2]: [PHP-DEV] [PROPOSAL] defense against session takeovers
              • Daniel LorchSat, 02 Feb 2002 10:49:39 +0000Re[3]: [PHP-DEV] [PROPOSAL] defense against session takeovers
            • Christophe SolletSat, 02 Feb 2002 16:00:54 +0000Workaround against session spoofing and session gc
              • Daniel LorchSat, 02 Feb 2002 17:38:30 +0000Re: Workaround against session spoofing and session gc
        • Ivan RisticFri, 01 Feb 2002 20:40:29 +0000
          • Rasmus LerdorfFri, 01 Feb 2002 20:46:59 +0000
            • Ivan RisticFri, 01 Feb 2002 21:12:40 +0000
              • Rasmus LerdorfFri, 01 Feb 2002 21:15:26 +0000
              • Stefan EsserFri, 01 Feb 2002 21:24:16 +0000
                • Ivan RisticSat, 02 Feb 2002 13:06:42 +0000
                  • Ivan RisticSat, 02 Feb 2002 13:17:29 +0000
              • Alan KnowlesSat, 02 Feb 2002 02:21:21 +0000
          • Hartmut HolzgraefeMon, 04 Feb 2002 12:49:05 +0000
            • Ivan RisticTue, 05 Feb 2002 09:56:42 +0000