Re: PHP FTP a security risk?????
| From: | Jason Wong | Date: | Wed, 12 Feb 2003 06:28:22 +0000 |
| Subject: | Re: PHP FTP a security risk????? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-135272@lists.php.net to get a copy of this message | ||
On Wednesday 12 February 2003 14:02, Chris Wesley wrote:
> Why? What's a better argument? It's certainly just a piece of a much
> larger argument, but avoiding a full-fledged lecture outside the immediate
> context of the original question (and trying to keep it related to PHP
> somehow) makes it brief.
>
> > So they allow incoming FTP (presumably that's what people use to upload
> > their site) but disallow outgoing FTP because someone might sniff the
> > username/password? Does it make sense?
OK, in keeping with the original question, again, why would they allow
incoming FTP but disallow outgoing FTP? What is the incremental risk?
--
Jason Wong -> Gremlins Associates -> www.gremlins.biz
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *
------------------------------------------
Search the list archives before you post
http://marc.theaimsgroup.com/?l=php-general
------------------------------------------
/*
QOTD:
"Everything I am today I owe to people, whom it is now
to late to punish."
*/