Re: Securing PHP
| From: | Philip Thompson | Date: | Mon, 22 Oct 2007 15:40:22 +0000 |
| Subject: | Re: Securing PHP | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-263503@lists.php.net to get a copy of this message | ||
On 10/20/07, Grant <gpeel@thenetnow.com> wrote:
>
> Hi all,
>
> You've all likely heard this before...."I was hacked..." , "Had register
> globals on..." etc etc.
>
> Well, this is true of me as well.
>
> Does anyone know of a site that would help a semi professional lock down
> php, i.e.
>
> Perhaps how to install phpsuexec,
>
> Jail users to only have the ability to read/write to thier own files and
> directories,
>
> php.ini directives that have simiar affect as mentioned above.
>
> Any help appreciated.
>
> -Grant
One resource: http://phpsec.org/
~Philip