Re: Security problem?
| From: | Analysis & Solutions | Date: | Wed, 26 Jun 2002 00:47:53 +0000 |
| Subject: | Re: Security problem? | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-103864@lists.php.net to get a copy of this message | ||
Hey John:
On Tue, Jun 25, 2002 at 08:47:12PM -0400, John Holmes wrote:
>
> Who does PHP run as in CGI? Doesn't it run as you, basically? So if you
> change all of your files so that only you can access them, PHP still
> can, too. Can you still access a file in someone else's directory?
Yep. Good point. But, all file access is controlled by my scripts.
User input isn't permitted to dictate file system functions. Thus,
there's no danger.
Enjoy,
--Dan
--
PHP classes that make web design easier
SQL Solution | Layout Solution | Form Solution
sqlsolution.info | layoutsolution.info | formsolution.info
T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y
4015 7 Av #4AJ, Brooklyn NY v: 718-854-0335 f: 718-854-0409