Re: Apache
| From: | Domain nikha . org | Date: | Tue, 24 Sep 2013 12:16:21 +0000 |
| Subject: | Re: Apache | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-322172@lists.php.net to get a copy of this message | ||
Tamara Temple am Montag, 23. September 2013 - 22:38:
>
> On Sep 23, 2013, at 1:36 PM, Domain nikha.org <mail@nikha.org> wrote:
>
> > Better solutions?
>
> One I have used, and continue to use in Apache environments, is place
uploads only in a place where they cannot be executed by turning off
such options and handlers in that directory. This is *in addition* to
untainting files and names of uploaded files.
Good idea. I will do this right now
Niklaus