RE: [PHP] php security on shared hosts

[snip] May I ask what host this is ? Is it a major one ? [/snip] It's not one of the major hosts that I'm aware of. I'd rather not give their name as I don't know if anyone on this list might be affiliated with them, and I'm sure they wouldn't appreciate the fact that I was snooping around the server from my site. That said, I think it's pretty shoddy on their part the way things are set up. Using Chris's file browser I was able to view information in seconds which if my intentions were malicious would have been very enticing. What do you folks think I should do here? Should I just change hosts, or is there any negative action they could take towards me if I were tell them what I've found? Surely not all shared hosts are set up like this. I personally would like to tell them and see them change it so users cannot browse other users webroots via their own scripts. At least they could make the directory holding all the user directories unreadable such that at least that way people who were browsing wouldn't be able to browse to other users webroots. Does anyone know of any reasonably priced hosting companies that offer PostgreSQL as well as MySQL? The reason I went with this company was they offered both, and were very reasonably priced. I guess now I see why... Cheers and TIA. Pablo