Security - chmod 777 - PHP upload/write
| From: | SED | Date: | Tue, 11 Jan 2005 00:25:41 +0000 |
| Subject: | Security - chmod 777 - PHP upload/write | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-206044@lists.php.net to get a copy of this message | ||
Hi,
Sometimes when I write a PHP-script and upload it to a ISP through password
protected FTP, the only way to write data to a folder is to run chmod 777
for that folder, I want to write (or save) a data to (e.g. file-upload,
flat-file-database). However, if I do so, I have been told, everyone can
write data to that file, which is a security risk. Is that true?
If I do so, is it right that anyone can write a data to that folder? E.g.
PHP-script that can reveal everything?
Regards,
SED