Re: Re: security of stand alone script
| From: | Ernest E Vogelsinger | Date: | Sun, 24 Nov 2002 18:35:48 +0000 |
| Subject: | Re: Re: security of stand alone script | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-125830@lists.php.net to get a copy of this message | ||
At 19:10 24.11.2002, gamin said:
--------------------[snip]--------------------
>i guess i can use $remote_addr to see if the user has an IP.
>
>But still out of curosity - any way of knowing the user that called the
>script ?
--------------------[snip]--------------------
If the script is called via command line, at least these fields in the
$_SERVER array are empty/unset:
SERVER_NAME
REMOTE_IP
I don't even know if the $_SERVER array is set at all.
You can disable any PHP script to be run from the command line by setting
the appropriate file permissions (e.g. chown root:apache, chmod 640 *).
--
>O Ernest E. Vogelsinger
(\) ICQ #13394035
^ http://www.vogelsinger.at/