RE: [PHP] Security Question
| From: | Ed Lazor | Date: | Fri, 20 Feb 2004 23:06:18 +0000 |
| Subject: | RE: [PHP] Security Question | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-178413@lists.php.net to get a copy of this message | ||
You're not being rude. I contacted them immediately about the script
errors and described what seemed to be a security hole. The tech I
spoke with didn't know what I was talking about, so I asked them to
notify the owner of the problem and that I'd research it more and let
them know of anything I find.
I received email shortly thereafter saying that they disabled
open_basedir on the server in response.
-Ed
-----Original Message-----
> It's like PHP is somehow confused and running my script with the
> account settings (and permissions, possibly) for another user on my
> host provider's server. If that's true, wouldn't this quality as a
> security issue?
not wanting to sound rude or anything, but have you emailed your host
about this yet?