Re: PHP Safe Mode Filesystem Circumvention Problem (fwd)
| From: | Zak Greant | Date: | Tue, 05 Feb 2002 05:47:11 +0000 |
| Subject: | Re: PHP Safe Mode Filesystem Circumvention Problem (fwd) | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-79179@lists.php.net to get a copy of this message | ||
On Mon, 2002-02-04 at 22:23, James E. Flemer wrote:
> Comments on this? I am going to take a look at the code in
> the mysql extension, and at the code in mysql as well
> tomorrow. Not sure if this is directly a PHP problem (vs a
> mysql problem), but it is something that PHP *could* block
> it seems.
IIAR, this is not really a weakness, merely a configuration issues.
Wou can deny MySQL users access to the file based functions very
easily.
REVOKE FILE ON db TO user...
Will do a bit more research to ensure that this is truly bogus.
--zak
--
For technical support contracts, goto https://order.mysql.com/
__ ___ ___ ____ __
/ |/ /_ __/ __/ __ \/ / Zak Greant <zak@mysql.com>
/ /|_/ / // /\ \/ /_/ / /__ MySQL AB
/_/ /_/\_, /___/\___\_\___/ Calgary, Canada
<___/ www.mysql.com