PHP shell commands
| From: | Lucas Prado Melo | Date: | Fri, 11 Jan 2008 03:15:23 +0000 |
| Subject: | PHP shell commands | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-267060@lists.php.net to get a copy of this message | ||
Hello,
Some php applications store database passwords into files which can be
read by the user www-data.
So, a malicious user which can write php scripts could read those passwords.
What should I do to prevent users from viewing those passwords?
regards