Re: Simple Security Clarification
| From: | Stas Maximov | Date: | Wed, 21 Aug 2002 12:23:05 +0000 |
| Subject: | Re: Simple Security Clarification | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-113428@lists.php.net to get a copy of this message | ||
"Outside" would be in '/var/www/secure' in your case. Or any other place
your scripts have access to, save under '/var/www/html/'.
HTH, Stas
----- Original Message -----
From: "Andre Dubuc" <aajdubuc@webhart.net>
To: <php-general@lists.php.net>
Sent: Wednesday, August 21, 2002 1:11 PM
Subject: [PHP] Simple Security Clarification
> In another thread [How do you protect individual files], Justin French
stated:
>
> "In real short, you want to store the files outside your htdocs root (so
they
> can't be served by http) . . ."
>
> My PHP setup serves files from DOCUMENT_ROOT=/var/www/html. If I place
files
> in '/var/www/html/secure' would this provide any isolation for file
access?
> Am I correct in thinking that 'below' is not the same as 'outside'
doc_root,
> and that i this case, no protection would be afforded?
>
> Tia,
> Andre
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>