DSO security
| From: | Gabor Gludovatz | Date: | Wed, 07 Feb 2001 18:13:58 +0000 |
| Subject: | DSO security | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-38584@lists.php.net to get a copy of this message | ||
how can I prohibit users to read arbitrary files on the system if run PHP
as apache module?
the best solution would be to restrict all the file system functions to
the docroot or the users' home.
thanks
Gabor