/etc/passwd
| From: | Mantas Kriauciunas | Date: | Thu, 10 Jul 2003 09:26:08 +0000 |
| Subject: | /etc/passwd | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-154690@lists.php.net to get a copy of this message | ||
Hello php-general,
my server is running freebsd 5.0
and yet i havent fixed bug that i knew long time ago, so can anyone
point me with some links or resources about it, i could not find any
good on google, maybe i don't know how to search.
The problem is
if the make script <? if($id) include($id); ?>
and then just write
test.php?id=/etc/passwd , they see all the file.
So how to make sure that no one can access other people files and
server files? and is there any way that nobody would be able to
download php files or how to make them look like code when they are
downloaded. Thanks!
P.S If someone knows good links please reply me! thanks a lot!
---Don't Get Mad, Ged Glad , Buy Gladware---
--
Best regards,
Mantas mailto:Mantuks@comcast.net