Security Question
| From: | Ed Lazor | Date: | Fri, 20 Feb 2004 22:28:35 +0000 |
| Subject: | Security Question | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-178407@lists.php.net to get a copy of this message | ||
PHP include statements default to the current directory. If the path to
my PHP files is /home/osmosis/public_html, why would users visiting my
site occasionally get an error that the include file wasn't found in
/home/budguy/public_html?
It's like PHP is somehow confused and running my script with the account
settings (and permissions, possibly) for another user on my host
provider's server. If that's true, wouldn't this quality as a security
issue?
They use open_basedir for security. Isn't that part of PHP? They're
running the latest version of PHP (4.3.4).
Thanks,
-Ed