Re: Apache
| From: | Tamara Temple | Date: | Mon, 23 Sep 2013 20:38:00 +0000 |
| Subject: | Re: Apache | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-322167@lists.php.net to get a copy of this message | ||
On Sep 23, 2013, at 1:36 PM, Domain nikha.org <mail@nikha.org> wrote:
> Better solutions?
One I have used, and continue to use in Apache environments, is place uploads only in a place where
they cannot be executed by turning off such options and handlers in that directory. This is *in
addition* to untainting files and names of uploaded files.