Re: Security problem?

From: Date: Wed, 26 Jun 2002 00:47:53 +0000
Subject: Re: Security problem?
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-103864@lists.php.net to get a copy of this message
Hey John: On Tue, Jun 25, 2002 at 08:47:12PM -0400, John Holmes wrote: > > Who does PHP run as in CGI? Doesn't it run as you, basically? So if you > change all of your files so that only you can access them, PHP still > can, too. Can you still access a file in someone else's directory? Yep. Good point. But, all file access is controlled by my scripts. User input isn't permitted to dictate file system functions. Thus, there's no danger. Enjoy, --Dan -- PHP classes that make web design easier SQL Solution | Layout Solution | Form Solution sqlsolution.info | layoutsolution.info | formsolution.info T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y 4015 7 Av #4AJ, Brooklyn NY v: 718-854-0335 f: 718-854-0409

« previous php.general (#103864) next »